last executing test programs: 42.40252285s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x62, 0xa, 0xff00}, [@call={0x71, 0x0, 0x318}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) add_key(0x0, 0x0, &(0x7f0000000800)='0', 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="fc4e1badcee7a623115fe7e2d3e2b47867e21454f5ad930a860a9ecef39c78137f0068", 0x23}, {&(0x7f0000000240)="18", 0x1}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0x1200080, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x5, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x4482, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 42.029985686s ago: executing program 4 (id=6): syslog(0x3, &(0x7f0000000140)=""/192, 0xc0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x97, @remote}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f0000001480)={[{@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@debug}, {@fat=@showexec}, {@shortname_win95}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000001100)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791068000000000005000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r5, &(0x7f0000000b40)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c4845"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) ioctl(r1, 0xc0104d08, &(0x7f0000000a00)) 41.85964079s ago: executing program 4 (id=7): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = inotify_init1(0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66fb47c82314b243f1d12d67bdb515cbae138cf4c2a9479e0fe7f5a245528b94188d77092d03d9b84522ca060df67b2281a92ae674"]) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x20000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x20, 0x8, 0x3, 0x40, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x67, 0x0, 0xd3, 0x29, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x13, 0x2b, [@dev={0xac, 0x14, 0x14, 0x43}, @remote, @loopback, @multicast1]}]}}}}}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x40, 0x5, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40885}, 0x4008044) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x6020400) pidfd_send_signal(r4, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38010000160000082abd7000fedbdf25ff020000000000000000000000000001fe8800000000000000000000000000014e2480014e2180000200808021000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000004d2ff000000e00000020000000000000000000000000100010000000000070000000000000007000000000000000100000000000080040000000000000003000000000000000180000000000000040000000000000007000000000000000600000000000000fdffffffffffffff0000000000000000030000000f0000008000000029bd7000033500000a000204840000000000000008000000080000000a00100000000000000000000c001c00", @ANYRES32, @ANYBLOB="0100000008001d00040000000c00000006002500060000000a001000"/44], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x1) unshare(0x2000000) 41.85899619s ago: executing program 32 (id=7): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = inotify_init1(0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66fb47c82314b243f1d12d67bdb515cbae138cf4c2a9479e0fe7f5a245528b94188d77092d03d9b84522ca060df67b2281a92ae674"]) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x20000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x20, 0x8, 0x3, 0x40, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x67, 0x0, 0xd3, 0x29, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x13, 0x2b, [@dev={0xac, 0x14, 0x14, 0x43}, @remote, @loopback, @multicast1]}]}}}}}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x40, 0x5, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40885}, 0x4008044) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x6020400) pidfd_send_signal(r4, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38010000160000082abd7000fedbdf25ff020000000000000000000000000001fe8800000000000000000000000000014e2480014e2180000200808021000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="fc000000000000000000000000000001000004d2ff000000e00000020000000000000000000000000100010000000000070000000000000007000000000000000100000000000080040000000000000003000000000000000180000000000000040000000000000007000000000000000600000000000000fdffffffffffffff0000000000000000030000000f0000008000000029bd7000033500000a000204840000000000000008000000080000000a00100000000000000000000c001c00", @ANYRES32, @ANYBLOB="0100000008001d00040000000c00000006002500060000000a001000"/44], 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x1) unshare(0x2000000) 40.589129569s ago: executing program 5 (id=15): socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0x10666, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$binfmt_misc(r0, &(0x7f0000000180)="b593", 0x2) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000100", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9, [{0x3, 0xa, "a70000000000000081030c00000000000000aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27cf3e34066d42ca0a5c15b37adac1508edbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272471211e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x34) 39.616462121s ago: executing program 5 (id=22): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9be86498d1bc2f19}, 0x20000004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$xdp(0x2c, 0x3, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r3, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r4, r5, 0x3, 0x5}}}, 0x90) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0x81, 0x14f5, &(0x7f0000001580)="$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") r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000980)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000040)={[{@nobarrier}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@jqfmt_vfsv1}, {@resgid}, {@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x1cf3}}]}, 0x0, 0x4a8, &(0x7f0000000940)="$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") userfaultfd(0x1) openat$urandom(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$BLKDISCARD(r10, 0x1277, &(0x7f0000000000)) 38.254754574s ago: executing program 5 (id=29): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x118, 0x490, 0x118, 0x298, 0x298, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@local, 0xf, 0x27, 0x1}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xff, 0xff], 'wlan0\x00', 'veth0_to_bond\x00', {0xff}, {0x7f}, 0x0, 0x6, 0x6, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.016346585s ago: executing program 5 (id=32): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x62, 0xa, 0xff00}, [@call={0x71, 0x0, 0x318}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) add_key(0x0, 0x0, &(0x7f0000000800)='0', 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="fc4e1badcee7a623115fe7e2d3e2b47867e21454f5ad930a860a9ecef39c78137f0068", 0x23}, {&(0x7f0000000240)="18", 0x1}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x4482, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 36.970103356s ago: executing program 33 (id=32): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x62, 0xa, 0xff00}, [@call={0x71, 0x0, 0x318}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) add_key(0x0, 0x0, &(0x7f0000000800)='0', 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="fc4e1badcee7a623115fe7e2d3e2b47867e21454f5ad930a860a9ecef39c78137f0068", 0x23}, {&(0x7f0000000240)="18", 0x1}], 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = timerfd_create(0x0, 0x80000) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x40, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000200), 0x4482, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 12.242163659s ago: executing program 0 (id=292): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x2802004, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x7, 0x801) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x3}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwritev(r2, &(0x7f0000001540)=[{&(0x7f0000000000)='\r', 0x1}], 0x1, 0x0, 0x2) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="124dba97c895b5e9fe0a41e91cfe0100e6080024206d041cc34000000000010902"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x209302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone3(&(0x7f0000000380)={0x400, &(0x7f0000000040), 0x0, 0x0, {0x40a}, 0x0, 0x0, 0x0, 0x0}, 0xe) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x2, 0xffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x8180) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x2300}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x36, 0xefffffffffffffff, 0x0, 0x187, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r6, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000"], 0x18}}], 0x1, 0x50008000) write$binfmt_misc(r6, &(0x7f0000000300), 0xfdef) unshare(0x2020600) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="7fcb41") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)) 9.22790564s ago: executing program 2 (id=344): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x11b, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x1, 0x1, 0x7f, 0x50, 0xff, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x10, {{0x9, 0x24, 0x6, 0x0, 0x0, "c270079e"}, {0x5, 0x24, 0x0, 0x7a1f}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x6, 0x5, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x81, 0x7f, 0x3, 0x2, 0x33}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x4, 0x6}, @mdlm_detail={0x9c, 0x24, 0x13, 0x40, "2be0c98246755bc84acda7b12e2624432ce4afe275824f0fe1d9d9b7e144513604587954099be9d5f633886f3c73c83abd07c5c2c10af5898eadac8cb7b6b5fa063d8b2bd3544046de4faaeebee0a5c369cefc8df787126b496e01e9c830c3bce132bc639f0ca814724531104d445928c58d41c22f223e2e8ed15be3561664b4a23c664b82fd79ed2b8829045e93c1c9c4e24d7f50bd2cea"}, @obex={0x5, 0x24, 0x15, 0x101}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x20}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0x4, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x678, 0x8, 0x6d, 0x1}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x3, 0x9, 0x81, 0x8, 0x2}, 0x1c8, &(0x7f0000000300)={0x5, 0xf, 0x1c8, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x3, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "94c63cdac62a69e2ee9fca620b80cf40"}, @generic={0x9, 0x10, 0x4, "711e2d821fd7"}, @generic={0xfc, 0x10, 0xa, "27cafddb7b2cc6bd38b95887c44035ee046e488eced65fc39f0df7113417ced173f9550ab3a40cdd8faf666d1201ac93a0aa2eb08d1b8c2478797a1b9bf40cca09879bb81567838db9fff3b1e215c15952cef68b578bcce5134e9db3f7a0e4ed963706bec566738d978ea82047d90efbc4079397224c6b592144f7f1b566900c8f40ee57fca28fca41833f98e41efdd76fa8893b77b75ee9108dae2fc59ae337332c85d4285eab2d869e58c59e63fa08c94ac6e0a41cc23aca51a2d9396f1a070f5e094ccc5db1454f08643ea7e21f3cd66b3cdf9ca731866c491f634adfeec060ca90970717e99a73e370da3b98a211f811941dc5efa63865"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x4, 0x2, 0x2, 0x9}, @generic={0x94, 0x10, 0x4, "e713ea596775ab8c3d5df4246df501a294f7e151d86e5734dd192844087e103a98e9fd6f90491bfbc122d420444f2baeb14ca2bc406e22799a1fb1718d1076c03c655187303770e50ef8dd73c32a3af65778d296037e90e91f493a76a2a8488418e721bc8737371de3c641d940cd2b16be2f1447e96d114ea61a52ef6ac66e751a38a6ed1b561bdd5f893c37659194c206"}]}, 0x5, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1004}}, {0xd7, &(0x7f0000000600)=@string={0xd7, 0x3, "feeba8377ca2904e0a772440aeb3d82768351f008c6cdc12b3c26cbbd94590defe3140fbcf18f7e0d1ebfc2dea3fe42718466676f3005146ef6870bb4bf2cad380561273f71c07e9e6e2ca76c42828f7f12e5319c5c2f56dc89db415eb5394f175a52c9fc7900fbdb276f6da37b613dc3e2cacc3787373c0c179012814ba3964cdade80b30480d151315c32cc80273828562090e49be743d8022017fdf7b1a8ace377f420009cbcaf00a5e65c0e7d65220fa8a0664d468a7e5945eba7cf70b05bb3d4640ab30e33d2e4ea54940362acec5dc023293"}}, {0x2e, &(0x7f0000000700)=@string={0x2e, 0x3, "e12dfdbcae019eba37dc01fe7533e09f1a7ab3e4c4fda6634b322a992859280904166ec00257aa56010a31e4"}}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) 9.198438348s ago: executing program 0 (id=345): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 9.174392674s ago: executing program 0 (id=346): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYBLOB="b010bf7c3ed3be29f05d396942090e8eab3724705f0f0aa1316f792422d68b2b8948709f548e2de1cc", @ANYRESOCT=r0], 0x0, 0x2d6, &(0x7f0000000100)="$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") (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x1ff, 0x4, 0x0, 0xfffff6a8, 0x3, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000ffffffffffffffff09000000000000000600000000000000ffff0000000000001c25080000000000020000000100008000000000ffffffff0000000000000000060000000000000700000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a00010a2000000000000000480003006465666c617465007742fbff00"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffcad, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100001800010027bd70000001000000000000000000000000000000000000fc0100000000000000000000000000014e2007144e2300050000006073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffac141411000000000000000004000000000000000600000000000000ffff00005d0000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff05000000ca3d0000000000002abd7000043500000a000100200000000000000000001d0007000000"], 0x138}, 0x1, 0x0, 0x0, 0xc841}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x0, @tid=r5}, &(0x7f0000000000)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) timer_create(0x4, 0x0, &(0x7f0000000280)) (async) clock_gettime(0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) munlockall() r7 = syz_open_procfs(0x0, 0x0) preadv(r7, &(0x7f0000001cc0)=[{&(0x7f0000001a40)=""/75, 0x4b}, {&(0x7f00000004c0)=""/229}, {&(0x7f00000008c0)=""/4096}, {&(0x7f00000018c0)=""/98}, {&(0x7f0000001940)=""/202}, {&(0x7f0000001ac0)=""/236}, {&(0x7f0000001bc0)=""/229}], 0xfffffffffffffd71, 0x100003, 0x2000000) (async) getpid() (async) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$setownex(r4, 0xf, 0x0) 9.083090918s ago: executing program 0 (id=348): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000a80)={[{@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpquota}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x20000000, 0x0) ptrace$setregset(0x4205, r1, 0x201, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x3, &(0x7f0000000100)) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000cc0)={&(0x7f0000000c00)="52da2faccb5856510fe0c96553aeb0256a5ba66026d4c728559e25d35f43f945cdbb67e3d4df940437159b665035bcb93112998f6f54af3ea482ac17134c401a4ebcfe50b14a5a7de4cf7d93f85fdef87cd5e88f7a4abdf0247095893698cb2ce2fe5ac775c219081d47fa83e34c6469e29123e1118b8a9a35bf9f15c8684b528b4f4c013090", 0x86}) timer_create(0x5, &(0x7f0000000b00)={0x0, 0x24, 0x0, @thr={&(0x7f0000000180)="d71e79a59719381e0969c319e24f11652e4628c28a32ddbfce60799a3cc563604b97d680b141867d9473942dddbae7bbe60b0e5f3a43a7fb6f3e063515beb40fc5e18f41b786e16f53a5f32932170241c061d4743ffa4f395e", &(0x7f0000000980)="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"}}, &(0x7f0000000b40)=0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000bc0)={{r3, r4+60000000}, {0x77359400}}, 0x0) 8.854606357s ago: executing program 0 (id=352): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) inotify_init() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x53fc, 0x400, 0x5, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x1f, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf27, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x0, 0x26d}}], 0x1, 0x0, 0x0) 8.737525717s ago: executing program 0 (id=353): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000019}) setresuid(0xee01, 0xee00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) 8.697996177s ago: executing program 34 (id=353): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x30000019}) setresuid(0xee01, 0xee00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) 7.129179474s ago: executing program 2 (id=365): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xe, &(0x7f0000000040)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x15, 0x1, 0x0, 0x2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f00000000c0)) 6.257614109s ago: executing program 2 (id=375): r0 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r1) 6.229745207s ago: executing program 2 (id=377): read(0xffffffffffffffff, &(0x7f0000000040)=""/179, 0xb3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x200, @remote, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000001000db5630304710a6b17c8085d8978d86a348bad487857217b367daaec10b87cee79512d1", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.995865556s ago: executing program 2 (id=388): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0x44, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x4}]}]}]}, 0x44}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r5, 0x1) ppoll(&(0x7f0000000100)=[{r5, 0x408}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e945fff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r2], 0x0) 4.490750047s ago: executing program 6 (id=397): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0xffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e60b91", 0x3}], 0x1}}], 0x1, 0x4400c840) sendto$inet6(r1, &(0x7f0000000100)="bb65", 0x2, 0x3b00, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000000002010300000000000000000a0000070400018004000380300002802c00018014000300fe8000000000000000000000000000211400040000070ea3573672cf976c15118b610000"], 0x4c}}, 0xec00) 3.978168759s ago: executing program 3 (id=400): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000240)=ANY=[], 0x2, 0x252, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000084000000100000000000000", @ANYRES32, @ANYBLOB="0000d500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x2000000000000004) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000440)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) unshare(0x22020400) r4 = timerfd_create(0x7, 0x80800) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {r5, r6+60000000}}, 0x0) timerfd_gettime(r4, &(0x7f0000000000)) r7 = getpid() r8 = accept4(r1, &(0x7f0000000100)=@caif=@dbg, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000200), 0x4) syz_pidfd_open(r7, 0x0) setns(r0, 0x24020000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x800e, 0x40, 0x96, {{0x19, 0x4, 0x3, 0x1e, 0x64, 0x68, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "e2d912"}]}, @noop, @timestamp={0x44, 0x20, 0xc0, 0x0, 0x5, [0x8000, 0x7fffffff, 0x11bd, 0xfffffff9, 0x131, 0x45c8, 0x4]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xa, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x94, 0xd, "97a34f09798bd7867abb21"}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000340)={@mcast2, 0x58, r9}) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 2.456232573s ago: executing program 2 (id=404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x1) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000140)="59d667", 0x3}], 0x2) (async) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000000)=ANY=[@ANYBLOB="ebc7daae3fb5b762abae23e1d32233ee277b4e6b3b168e76e6743177a62125cf8c4b0eafb6466bc4b8e468ee62"], 0x0) 2.455023904s ago: executing program 6 (id=405): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 2.43030676s ago: executing program 6 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000240)={[0x7]}, 0x8) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000280)={'wlan1\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x2c}}, 0x10000) mprotect(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x148, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x71e8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4e}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x746a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x13363d4a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}]}]}, 0x148}}, 0x20040010) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 2.164660419s ago: executing program 7 (id=409): mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x0, 0x100010, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) 2.100610256s ago: executing program 7 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0xffe, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)={0x10, 0x3f2, 0x100, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$netlink(0x10, 0x3, 0xb) 2.090524298s ago: executing program 7 (id=412): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 2.027863545s ago: executing program 7 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x9, 0x0, [0xada, 0xfffffff800000000, 0x1, 0xa, 0x59], [0x400, 0x3, 0x3, 0x6, 0xa12, 0x8, 0xfffffffffffffffd, 0x4, 0x2, 0x80000000, 0x7, 0x7, 0x140, 0x4, 0x6, 0x2, 0x8000000000000001, 0x6, 0x4, 0x8, 0x8, 0x2, 0x8000000000000001, 0x80, 0x1, 0x2, 0x32, 0x41d, 0x3, 0xf9a, 0xe2b, 0x1, 0x1c, 0x7, 0x1443, 0x5, 0x7, 0x9, 0x7fff, 0x0, 0x7, 0x7, 0xde7d, 0x0, 0x4, 0x8000000000000000, 0x40, 0xffffffffffffffff, 0xf26, 0x3, 0x4, 0xe6, 0x359259eb, 0x9, 0x8, 0x8, 0x5, 0xfffffffffffffff8, 0xffffffffffffff0a, 0x2, 0x43, 0x14, 0x481dd742, 0x5, 0x2, 0x3, 0x1000, 0xbec3, 0xfffffffffffffff7, 0x6, 0x10000, 0x6, 0xb, 0x6, 0x6, 0xa0, 0x8, 0x5, 0xffffffffffffff01, 0x8000000000000001, 0x4, 0x6, 0x6, 0x3b, 0x0, 0x9, 0x2, 0x9, 0x3, 0x8, 0x5, 0x3, 0x9, 0xfffffffffffffff9, 0x4, 0xb7, 0xf, 0x4, 0x3, 0xf, 0x80000000, 0x8001, 0x48d, 0x4, 0x4, 0x4000000000000000, 0x53a, 0x8, 0x5, 0x2, 0x2, 0x8, 0x6, 0x6, 0x2, 0x9, 0x9, 0xd, 0x9, 0x1, 0x876]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86"], 0xffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.972773109s ago: executing program 7 (id=414): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x2, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r1}, 0x38) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, r5, &(0x7f0000000780)) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x200800, &(0x7f0000000340)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x100400a, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) dup(r0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x1, 0x0, 0x2, 0x5}}) close(0x3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r8, &(0x7f0000000140)="bf", 0x1, 0x0, 0x0, 0x2}]) 1.763710743s ago: executing program 3 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xff, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x4020, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x5d, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x8, 0x800, 0x6, 0x401, 0x200000000, 0x0, 0x5, 0x7f}, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f00000002c0)={{0x2, 0xfffffffe}, {0xffffffffffffffff, 0x8}, 0x100001, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000080)='\x00', 0xfdef, 0xc044, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r7, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8091}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x530000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.760501614s ago: executing program 6 (id=417): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.760045894s ago: executing program 7 (id=418): fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x97444c3fdaaa5e31, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xffffffff80000001, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000000000000790a1800000000001e50000000f2010195000000420eb728c00ac136db806012e9774e1113ed7ef1658e01fadce993b36702cc55e7c2b54ab23ead80189c92c56618b9679004ff92d0dba66af273982ba2080ac697addb9fdb89687f98e6fd160efef9289cc0cd9494da5f4d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24004000, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01a65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c128b69992477ec", 0x400017}, 0x48, 0xfffffffffffffffe) request_key(0x0, &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='c\x00p2\x00\x00\x00\x00', r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 1.759833354s ago: executing program 6 (id=419): syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000600)={[], [{@smackfshat={'smackfshat', 0x3d, '#^\\'}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, ':[:\\'}}]}, 0x3, 0x4c8, &(0x7f0000000840)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_io_uring_setup(0xeee, &(0x7f0000000080)={0x0, 0x378b, 0x20000, 0x83, 0x3af}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r0, r1, 0x2c, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) lseek(r6, 0x289e0cb5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8000000000000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r7) 872.756923ms ago: executing program 3 (id=426): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x25, 0x55a8, &(0x7f00000014c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000001c0)={0xffffffffffffff2a, 0x5, 0x0, {0x0, 0x4, 0xfffffffffffffeff, 0xfff}}, 0x30) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101c42, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x185) renameat2(r3, &(0x7f0000000300)='./file1\x00', r3, &(0x7f0000000340)='./bus\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xd2, 0x0, 0x7fff0026}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000380000000000019078ac1e0001ac1414aa0b009078120002282508000000000000002f00007f00000100000000000086ddffff0000df462e51e28ecbfd059f"], 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0xe, 0x1, 0x11, 0x10, 0x2, 0x4, 0x42, 0xd, 0x6, 0x1, 0x7, 0x8, 0x4, 0x10, 0xe], 0x3, [0xd, 0x3, 0x6, 0x2002, 0x11, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x402]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) close_range(r4, 0xffffffffffffffff, 0x0) 743.987037ms ago: executing program 1 (id=429): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000002c0)=[{r1, 0x53a}, {r1, 0x100}], 0x2, 0x0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x20000, {r1}}, 0x20) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000000)={0x9f, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000080)={[{@inlinecrypt}, {@usrjquota}]}, 0x3, 0x46b, &(0x7f0000000940)="$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") 714.369245ms ago: executing program 1 (id=430): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) fremovexattr(r0, &(0x7f0000000340)=@known='user.incfs.metadata\x00') r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x8, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x6, '\x00', r3, r5, 0x4, 0x3, 0x5}, 0x50) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 'id0\x00'}) openat(r6, &(0x7f0000000080)='./file0\x00', 0x0, 0xc2) timer_create(0x5, &(0x7f0000000240)={0x0, 0x20, 0x1, @thr={&(0x7f00000000c0)="9ba0987eb3b746057b2123ddf116daba5c157e2e4311a92689cf4dbe0340d5a35c321b0afea3440d00ac8d02dade44948e0bd14d803124f73b530cd883c38c2ca413c26638acd389c5771b899aaa0501df25b9c6453b41b657578881f4fe9e", &(0x7f0000000140)="b6df4b80afe71897d328759c39fa5e38cf89182e96d2e0dd60599a7255d4e98f9273a15e6a18394c4bc63627bfc37b92d364ded068ddb71aaea18615bcbf5ec0996041128cc6ca9f1c7cbc4163776679efbb7123e7f6237fc4dcf8dc6a6dbccee02b5ae817885509a2e203a7afb18eb52a2a4031600489b06fd0b068b98c576d340502b7b6299781b27baebefc33eea494f05fc7f4476749f9760c85fef8b017ceb0625cbf99a6167f75bd0d64a647a91facd8c61d5b32831577962358752a260210d42a58aa96cad3ea"}}, &(0x7f0000000280)) syz_usb_connect(0x5, 0x36, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0xc4, 0xb, 0x62, 0x20, 0x5f9, 0xffff, 0x645b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfe, 0x81, 0x30, 0x32, "", [{{0x9, 0x4, 0x67, 0x2, 0x2, 0x91, 0x2c, 0x65, 0x9, [], [{{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x1, 0x10}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xd9, 0x2, 0x3}}]}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0}) 242.451827ms ago: executing program 3 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf252100000018000180140002"], 0x2c}}, 0x4800) 116.705439ms ago: executing program 1 (id=432): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000009ca1000001"], 0x1b) close(0x3) getrlimit(0xc, &(0x7f00000000c0)) r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x300000d) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./bus\x00', 0x3000100) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2008084, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 116.004139ms ago: executing program 1 (id=433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0x76, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0x1}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) madvise(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r3, &(0x7f00000021c0)=[{{&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x14d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)="3cb66f7852d271161a926166a6d164946e7612a2cc97cf881963891dbcc2137a51644d6a8f1b6e3996b6ce2682e42d426f6bba04886d902ee6ca5a6b4ff9460bf58a8f2b89676bfa4e9d546e9672b04505e0014f58d9f1ae261a51eb519fb65746b4450058304baa24ef26d1ed6ab5baa7e2d398e1200ae71a24bb248df5710f73b6b9585e9e32f01a909bf863b22cfcde06f0e76b3e95bd5652a6451db97ea7aa1bddf5c2c8b3d039049de082d894ca57de3da177eac931b8c88bb6fc0b653c51529e7397d4c4c855937efc543b3092fb04d3", 0xd3}, {&(0x7f0000000580)="0b347a6e3cb47535e05ad28afd015f1fd48f296f277615420a364cd4a2f23d1d96b93759e1b2fcbed0d7bba53bc82c4935882bbf12ec2081771a058f30ffd3839f965e508f2573b8a2391fa78b66b3d73016d992a6c6bd8b96c43b8b8bcd4d5db71bd4161fb07173af82bb9499483308bd9365169a55c1c5bfe431ea274cd78ffe93fbae289b8285b5fe9395dcb1b6bf1f19784d4522ed7b03432dbb78ca6d63c2608d9ec341ec4b657b5f4cc4dc1f14d88b81338362ed56f013485082d5c0430e1b978ca37cf62c3b975bdcd4055e1c0651c72d775749935a93cb6858807cf7e6dc408eb10914", 0xe7}], 0x2, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0xb6d3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x21c}}], 0x60}}, {{&(0x7f0000000740)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000007c0)="7ca307adb7480b467fedcb432aeb264d84493508a53fd7c4cfcc4dd1fdd37cb370ac743729191904039d346d8c061bbbb5fb24c434801525899a3f0d8bdad89bda33e16b039f9b79b09d6596f4a886fccb7c0a4da4bc9457bd4223588201cd3a066a4e8e919209da53a45bcc98fc9aa1627a1f49a518265d15cf6ce71a2375a638a9498647397d016b01e401f555a87a2508e6dc9d58165bc545251a8ed5e61a514c49b043bf55db9ed35b3361e69dd77b0c3d2c3d5db8ecfb39eea67241785c2b2cdf4fca2d6c1819c9f700eaa0481069", 0xd1}, {&(0x7f00000008c0)="a10bcb67609e74c9a935c620f378479c6033645940675cc83fe7f7cbba27d83d7b6b757440a1d139540b01c3d348fd75a411690afcc24fcc05a8e3bdc63f6cba7ef14ca92701c65f0d82ca63effb34fe3a5e07637bcbd7b20e4f251b27078039ff7fac980157d96500880aef680be230f9afef52daffd020675e65d69d3a53b5fa2c0ec2efc5e070cc407d28ef0999a006dc167509b900f4303ea7080232b48417bd511cc77426d2e69e8bcba035febee00469b68389870f2039cb000deb817a9d20cb23c8298d7a", 0xc8}, {&(0x7f00000009c0)="344872669df7716e360c37b9d49c49697f6385550644a8d6f03160991a1793d0c523539b3cc0380ce1877dbea3a505d6550ee2ecfe68427ab13b0744fa44185cc1dad61472282eaa8ea84dead94409828bfc138d1f27e167e8bb2dbd4ddb88377aa07b6ae75812f718f036ce0cd1afe8d5c8326403c76c3ee0614555aa5fd1103c3d43365397bf7ffeb23cf153445add618a81744e3ed87ae1cad2fc4bf41fb2ee553292d01ed8c6eab70eaf0760d374e7ae48f29d465d6694e8285dcde8472fe17aa4e80afe06738eb0ba080a5bf38e027224123fdfdea1e542568bfec7adf2", 0xe0}, {&(0x7f0000000ac0)="69de9e30c155bafce2b3d8015a40c6c5fa333ff52af250c29613e9f9d5a533ee56841a38997cc12dbf81234b2eacb152c00b5a8bc82b7830903cd6698370eab114e6994e8329958c2c3117b234333f439c4155e69522b1f464d8c71bac0ffe57683337e644e6b220083a50ec9381cac0b3b1ca3f8a6fd4", 0x77}, {&(0x7f0000000b40)="af2a23d3d746c4d0df7dbd06bb17611e34795fb386dda7a84511fef352dedd404d490c1402a7812f30348557aa5945404aa8e179edee0bd75e6326e09c27059b880a7bd1dad21ed482a231ba48269a3b32ecea6c152e6f0e3c944c078c8847031361964830abbe96aeb067625738f56276cc05f620e75f66fc4aaf9b907619168c25567dfea7224c9de7421cb11909994eedc8191e35b0695d4ac9c2ad9461e23be3f1c24ba8f5f4e22e4704f120e2fd714fcf73e087a351b028fb8941a19d8cc2a0741db64bf3c7e87001d2e57924c17a7d7285a29e362ba3eb6b4a9dbc5e12d0a27ed5683e017c45be9c18ab39038512921bb9fa7fd20654030a0c0f409bce6c3020dbf4305eaa22397597a78da204c119aa86582d4d0879b56def66543178b2053e8306221a67e151f3867110828346249e1af6efa6ea71abe5c05fef548958a669bb500260330608f2cf2d87004aa40b9677e467f245b6e98aede7057475c469668be88016c72133ac3c3d5a9519b3fb375e7a95af8603ed91c9a7ace2553387084339573af6267c4962d781ca5d716a87e1ff72f5602517c80cefad64feb800db1e4cb106ce41243580d05c9bc1b5afcb9f0b3d463c5149c32f2d4eeecb45a0314a17c892a15723b7ac434aacf97f50a3e742c88ad3a5895643297078ec6f6c9427fc0c7dd45c644025467f6f37142ae2459a637141726fb0eddb414ced7ee8384fa75103ec3fee7fcb39cec1be1a9bddd12db53cb836eb64eec738c9786d458994386c13e757fcde027b9286492be6387ec6a3636f4e7674a47ad5e9499ef2349d725f22ddd0b69198e06729a476eb28337c04b32b739178c69d95ffb075c7de6dbea938d1c274ef46044924a8ef231ced6990285bd92027ff1b1b9be363bf0f3a06fbc4dfba88453b22eded2cfd1501f631442e985a4d5ce689dc1c5368ec3b61b31d46780356d2113289e997eaa36df14cbbbf42628d2bc1091860ae234cf7fb4acad4f4ecb9ab1a6822b164974a965131772f8eec07be47235d61391fd5cea18e641528bbe7a6075d3309c6d93786b35cad75da1f2527edb9a762aa1b05ed2eed8f575470b974a20dbe3ebd3c4d5b18d64aa2b4153a77c16dd75b835f8eb9931d217c242837be4968ecf943f6e0cb2b336e97b7d2c2477bbedaa556eba9bba1bdc81fa82deb8f1fdd7d5bfcdcbaab2e1c446577e1dbc2a1d87b3596d596c71d64dbaed664e82820533f99c1c91f4e379b0bb2b1863063569b35c1d6ad2ea7231083f809adcca698109d9ee10802da0629ace6358ba049a42a777646d366d151f8917735a14c1c896d8a26c15eff6420c9a562fd618e43ba16a6ffad00512f55716283e0760fca691c9e3213aa5bab7290fa50d7e27d8253c64a78e5eba08ecfa86b6d550a356996c8edbbd3a3a6b7cd1384c53a4083f495b5c231c2c6b455d264637cb7ff54a6f84a5569175ae6a5f86c33cca89d33e9a1f0fc8a845e6d9773e168ecfad8cce7bb0b19d1dad40276fb5ca7f422ae7e7be8b9e0d868b08b07c838b043f41c13e88efa2e12ba81ceee56042e0a9118ded96b60296bd9e51509537f2030a46660a6fc709a3a4f31b268f5d3a093e4c2c8d7f0581cb8070752b486a3aef209ae6433dee9217fedbde6ac6ec673f247802170206ef9e73dd43c9f4c654c8ab7eb1d382a0c541bed32fc9a4d55acbdeac61a12b91f6d3a9b883c6c23c90276257151d547033a4feed11d3f99e59abe5d009d0ee584b88295d3ba95b16d54d90b6027b9a540b47775faed96bf13d704c7a2671bf272e54024c0df086aea5afcc9901295261f9e591c6533a6a28e24a5df452a16b011aa048c6351e1f0c34028b961494d51c4a16121cff5bfc9ea10f7d80197130a186d53f0b0a3a3055f71cfaf0a5586d81bc3a6b1a0363e6475ad8b62194301a2365dd82dc06efddce65b837a4b8c80e62a9fe7a826412ee09e22d445dfdd2213d4cb1e9adeea46851650c5bc1c80123fdc5160aee7d27ee7f53b66c5ccf6e0f2b98e786a9778876a37e61c203210404d9ec9f6c4f7806bbc91cbc46c92aebe11a641ebf083f919fe29048221d3ef3a66f9b82e03bbd774072f7cb4fd56d4a8707dc510fd1c79414f1cdea46b29a7361e83239a8a97aec1bf5e538a65abaacce41cb7fb4bdccb3f8e518b0da614bff1887c99a69f2325ffd1104d575e57d4ccabcd1e4c5a6d9589180512041bef0f94334e43beafe70fc372ea14180b37e49c149c3c874cc15dc468345865010e6a2ddcf7d340f6976770b78925ac1033feeb3b9a4d856d66f609a3c7f2658ab7c03c4bf79f74321465666910b20420ad342e70e3b4234516beb40f488a1dac11c7982e2da5a6f29c54e5a22d0a72743b9869cc1fb5ba1039ef9bb698382f83d8b484db20cb48f93986cf8b98417734fe0b7ca1770aa2dcd901d3ebdcc1702acd38aa2face1911ca3eceeec9ebce945e9aadf9283b1c036556f5d17b62185626189b39192fcb2cde3c9e807c20f25248c9ac7a4186a606ec736fb260ce90a7682e4d5d83937a42d477619953b0e76d4c0277810f5b6352fdc9048c9d48773c8b02c1ccfe61c0d1d78ad2e6eb2c36f05b9fef418ebd1d892697dc031c6c41f7933f089ddc814b2813a581dd84039200868295d9fc138f800d69fd25b1286ee3d22c8250adaf469eba00c9898c76dd1aab5cd704df6fc2bd884f55529a9396b666afa86f21244d6f33ad6879f203f631e4325d1b19b80965696405a4514fdba7dcac170848fc6665b4777541164239b49c7d956ba38f8f909673662b5e71bbcc2c07ef2a6415eb2c91d08e1720db0075007ef4c7ffaca7b7007e972053c647906c6fce9bbe4e45fa808d35653531de75259417b6c1f0a6749466a331feedf2f5734cde8656e0f2e58ee32f38cf2d0559d2441f67b1a2428282760744299be3049c3fa8d71c824baf006509877458884c99d589c9994f6192997b9fc4b4d562e99acef1d773c855b70402a3c1f855129cb23ffd5a695c35f8e4d79e76f644ddf34c759b2d93968d81b25d571e2a969e54511ee74f229264ed78029259daacc88c0ba4900bf90b4ab13e74868403ec244a24a070f232f99919850ff3ebcf7864171897001c885dc772dbe06f8e36ac00ded7bb5fd0bd21433cd51511b1b03c9ae520a03254e5aac2b0d6ecea07367ec3c69f7efefd65b64a4c888d2172afd2a5d1817a01d7a24a1bd17c5ec8c9f10afd9b49e2fc809709ff49997a489ef8b83a0bf06dd1d9c386804a1cf15f6cc6165132e63b16f5f6f10eb0859c21dcf4e62fa23d5cf70a25dab40cb15164d13ff83031af4a28d1023895a106064684f99cbebe65350e92f9646c4fdf37fc1bf5a727bbb33749435e29df323a73b51490990c7acaff8d80edd3af1a605660e227eda229f5b406aa8906e98b4ab6e9f456a1c3295722dbd5a0f3644c684ae98d8611ad142beae62eb9069461590a8792e045d3b7893d4e4d737e21bcbf06ed87ff5178eaa9be610c3017ddc4dcd90620a6a58fd2fb6a0c0d7003bffd3daeae9e288d574641f7a501b4a8585af03c4f849add353a7647ee1011a3158df9f1071386a6049a13ee852b9fabbf753581f32a09dca2ca3760fb457cfd7fa3c11ebb5ed1327cc67995d98559432716cd732cbdee81e28d4ac5658b0be22da09113a352b8055b30212224e6b6cd81c48b5871b8a787889ca16de5e72f5823163e3b7b7bb6c801d4428cfbd0939fe900b67279faf9e8acab0891bda024511f5e2559ac744195f2deceda574f232066318077aa9a7e0ae24e59ae9b232cd4a5f9f0443e5e4cdefe6cfed0fc751512960db8080f9e52f90b37e31db269f71ecd98640cdc8ff802d285e77697a7a9b97716844d7dd3dcdd44b56044ec04a2bd99802233e730b744f9e0e1e2a93e9fd4e1280fdff8893ae11952eae203ae1cff6996df76b04360cf1769eae74a2119babc9a8deddcc68beabd2d3123fb1d79572e9b65950039c61aab8a859731b866c02a44c8e2c07b9b7c179d66abeacf202c040e03a77a633cb258820c39b2cb31563eb62db28643256dd6ecaa2309c730c29f0e13542272b3a512c27f9dee7ce12e91cc8076da6433e0c402322456bf6723e9f60205ef30115b2b82e61f87b4a12311a4ea5736916a7138203bb5e47d19e73d2782f558da82ae4c8198728fad6bc275abf036d937eb0b8d53a20d63e5e981527535a42405458aa4be6f2c611083c650f80c29116d29047d9d857507758b58d3d76cf52f95c17ef74a7976ef750b8c48d4470c384de27a6e5103cdb84a31f4115972e96d7e9ae805454dc110cca4b160b2916719a0994476a0a72934cd9f3b677ba17b75dc2804d556eb92202b25471c0b646bb5a6df55eda6e49194a1bc16bd67e36770e908e2b269951bbd9f678886f43a433c153061ecced9fa59d47e56d428a724c61ce93a07facb2f4e9972e047c480067e3c5f666f5a236ad36b6a60c262db4bd5bb96a0b74da81ba9a0028e3aa7792eb3ddc1f3e866484b9a83a6cec3a2b89da9eea6b5a15952509cab4aababc88004adf0620b3aedff7e59bef59ed8b3e77bb28ffffcdfdfe09dddf775c29208f7bfaf2dedf225bd502ccc8571a3247651b8ad62f31bd33c77ecc42aa5f18a545f078fada0b3cd40f904aa1c49b1863928855a751cd0e76d21f042dd5cd7f1d9617287c077961ff863003b07db7249d4bf7df711a36bda6e173ed0de770641fbb91f5f42a97cca359bc7a6d2e8ced74e3f5bac7cfbd936df899dd034869d4ebd47ebf0bbda2235ad4ba8b9da9ed11f567afa969cd457dbc7a6141b738f2af1521683fb51f7a657391eb64cc7e0917bad69903034470ae0f4e165134a2b94a59b459bc76137be4e1df992dad9cc068c4e4ef391e0801a75e4a00b16dbd9d584f1654ed0df5c8d924b8c5c27dd7dd9a9cf1ca28761a574ddba7bedfb4add975b693ac1dfe660c40f11f4375d351b6fb8941ed6ffb07909750bccd7e16db883481edd885a07d43b4c1ee26c69de11e3191d49a7e2125bed4565c388a205decf6d867ff1bd4580aa34896a85d62c6ebf4d378d8577dd4b1c548f14c410bede2c7a55fdd0db101621095fd32ea46c275aedbee0e8b510c1a0b733bc7b3ca25f21a31e4a67998ee75a2a4aad41d81228a7f6c1a6a56a8b93ef67837e6c656e8bff83b0cd949b2fd15af872e0dad1baaee69692dd8c501356cd0d32cb4ee1620f0c9cd0192f471f9a34b1c5868606cf60e8fc9902c684d043fa17d339a7224252430ab6917b18c2526cd94fdf09df8522ae0e2c163b5bca0954786d7adae59abdb5ae39d58aeee6c804cf01155f4965bbaffa26a5108d66971801a73dade76fc3560731c2d2a4b1b4517fcd57676b883c7c35f0ac8776f0bd75949e7f8f07a489cdab9911f7a8441d96cb34d42d379794a78354f23281ad42607a1527488d5beef0c834e72ca365cf70c9a4abe149826202a2cc0e9b33de3bf95d813c97595a5db1bf3cc6608655c49ee1b03856878663e56adb93a4eca66fdec75c4ae02f34ea2a7158343e75d211a3d7ca83a97430d0d5c4332eb4a64e9bbbb91fb1c1b958c0f0e25fa22cdf09801102990a6211da30d64adc3bc59c32f8d1043b5356ba9d6cbfa63474f3725ef28997637be381c11371a985b12817fd1a3e247f63fa7d5eb0140014b0118d4360508d9723b792d62c396317da15cf25e1a909b066389974fa613b4fb27c71b524d535fb3a0877b3764f94462554c324cc3a462fc87e33456db17d9b3", 0x1000}, {&(0x7f0000001b40)="37e5fc110fa976c858e338cb84ba9594dc8fb413712df78052ee000be26c218f27141726e5c847da8bba794d71bd6ed2c7f348c968c9d5ef215aa11705458a3080978084fed96756b4d66cf08e4a872d23309f4b538ea5c6645d16beadd40fa7d40945831e2210c8df43751f", 0x6c}, {&(0x7f0000001bc0)="bc0fe7632fc8e9468426d4b2bc21409d4cc6fa50b8c3e662de0a3aeafc338574d90aa3754bf144714710bd3e49543c554839d231ba18d3b68e33553715ce9df7f063e6a0d05dfe1420db09732772a4c57f94812a1155a35a52c4556a6eda10024e4106d9358d60529a1d2c9197c371125595a937e80367d07fa6de6fa4e06474cc5af4cb86fa26c5ada06810625c13e271581a57a1529a80355f36bdd93c68b575017f6cd3bfbe0321a4b2c6d52432a80215297fc66966c3523b52906b5cea43", 0xc0}, {&(0x7f0000001c80)="2f8b00c33e4310ec2d957a9c088918dff01e40df8258b7e4b9acdf7cb59608dae1677def54aff28e90fe0f08cfc9068fe4ec8d27071f10dc9266e1d5efe3cddcab98f7a6f8ceb8ebc7c492b8121cb31b81aeeddd826ca5500173a6d47e800b5cd26482387b08b9252eb7633cead122f9bf79d15abcd885666af884a306bb452547f5691ac70530db6bba58b5fb190ba162490af441222d384da512bd08ae3a4f12262d7038e662", 0xa7}, {&(0x7f0000001d40)="90a8019a50513069dcaf7df5a782d954541d3542e2a6eded1e6f10a64ba042b7f3178964f5f46b03453243d6e5ba006b75de93b3153b614ee0fa706b37a03809da553deb7b0a58de0e39eb65e53ae444768024071da5c58529f3fd12f84e068c93240695d8", 0x65}], 0x9}}, {{&(0x7f0000001e80)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)="13d834cebd6ca4b5e9ec7c04ebf011f3b7ac922b5a14b8a59dac58bba2551984a75a0d", 0x23}, {&(0x7f0000001f40)="d3036416f8e50290603f81848831393981018bd910fce5ea77c3cca3c6466806b93005fe188be0d13ee98e2fdf2515bc01ea690d01c2451207762021359c2517cd944adbc58ba9651879e3a649a6fb599619710a016ed02b32507968f6e0f46ee6b009cfa88b08d60c904e43214dcfaeeb04810c", 0x74}, {&(0x7f0000001fc0)="22ae4ef68db2e6cc2e90a9666e14146105c1d5fd44fc82b51055eb08ed4a96c4c8015a531ee058e273103a5d27353f4cb6f13b4c34c1a20e131adca37ef2543fe53e60d3099276d2a7b689d6bab0548dc8ecfa72a3f068f2e6f007f0618aa4db0209f036dfdeb96d8da3cd38276fa45e94872659720ff2a8fad5592aea6be8d8abaf14155b5f59007e4661a7b2d5d8810cbcddd6e3ac9e7c455f168e65", 0x9d}, {&(0x7f0000002080)="03549f839170b5c7b3d58a8aa3b9011a25c9f91c848880f247836fc60dd8f9f35ec1929981be6f2325c5d1b4709ce6afd23a0f9531fec80206edbc7817b87023a00c10489b92116a8e12a9362526821cbe08b5bd1eb8f8549a436431142b7bef8a0e87990769500432ead5d5a406fd3e", 0x70}], 0x4, &(0x7f0000002140)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x48c}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xc0a}}], 0x78}}], 0x3, 0x810) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40084, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) 27.776073ms ago: executing program 6 (id=434): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x2e, 0x0, 0x0, 0xfffffffc}, {0x6, 0x4, 0x0, 0x7ffffdbd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) inotify_init() setregid(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sched_setparam(0x0, &(0x7f00000006c0)=0x4) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0100001800010027bd7000fddbdf251d010000"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200003fee5a06850000001700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0xb, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1a", 0x1}, {&(0x7f0000000080)="83", 0x1}], 0x2) 27.496613ms ago: executing program 3 (id=435): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000780)=""/87, 0x0, 0x1000}) bpf$PROG_LOAD(0x5, 0xfffffffffffffffd, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 27.007093ms ago: executing program 1 (id=436): futex(0x0, 0x109, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0xd0f, 0xfffffffc, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x10, 0xf}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x8f3, 0x0, 0xa3, 0x101}, 0x7, 0x0, 0x1, 0x6, 0x4, 0x13, 0x1a, 0x2, 0x6, 0x4, {0x3, 0x0, 0x7, 0x8, 0x0, 0x8}}}}]}, 0x78}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x105a02, 0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x3, 0x8000, 0x6, 0x4, 0x0, 0x4000000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES8, @ANYRES16=r0, @ANYBLOB="51c28e28c5590e01"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) write(r4, &(0x7f0000000400)='4', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b"], 0x0) 11.855627ms ago: executing program 3 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) socket$unix(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000081000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x4, 0x1, 0x1, 0x4, 0x3ff, 0xfffb}, &(0x7f0000000340)=0x20) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) r7 = socket(0xa, 0x3, 0x87) sendmsg(r7, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000180)="72a103265e55", 0x6}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r4) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r8, 0x4, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44010) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r8, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) 0s ago: executing program 1 (id=438): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000008c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000024000104000000000000000000000000010000000000fffff1ffffff000000000b000100636c736163740000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000002c0001040000000000000000000000000100000001000000f3ffffff000301000a000100626173696300000034000280300002800800010001000000240002802000010000000400000000000c0001001a100000001000000800030000000000"], 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001cc0), 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000280)={'sit0\x00', 0x7}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x9444}, 0x8) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x24806, 0x0, 0xfd, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbffedbdf2500000000000000000000000000000000ac1414bb000000000000000000000000000103944e230007000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ffffffff000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000dcffffff000000002abd7000043500000a0001fd2000000000000000480003"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x7]}, 0x8, 0x800) readahead(r6, 0x7fff, 0xffffffffffffffe4) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000002c0)=0x3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000001c40)) r7 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r7, &(0x7f0000000080)=""/180, 0xb4) sendto$inet(r7, &(0x7f0000000300)="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", 0x156, 0x80000, &(0x7f0000000480)={0x2, 0x3014, @broadcast}, 0x10) kernel console output (not intermixed with test programs): [ 24.825400][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.832968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.840641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.848198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.861159][ T289] device veth1_macvtap entered promiscuous mode [ 24.883468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.891600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.892392][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.901018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.915375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.923619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.931149][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.939335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.947372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.955567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.963983][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.972235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.980503][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.988622][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.996680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.005202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.035062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.044792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.046619][ T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.054215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.078339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.086834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.095408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.105807][ T288] device veth0_vlan entered promiscuous mode [ 25.120030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.131493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.140560][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.149140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.161587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.169630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.177150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.184964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.202107][ T290] device veth0_vlan entered promiscuous mode [ 25.213765][ T318] loop4: detected capacity change from 0 to 128 [ 25.228936][ T318] ======================================================= [ 25.228936][ T318] WARNING: The mand mount option has been deprecated and [ 25.228936][ T318] and is ignored by this kernel. Remove the mand [ 25.228936][ T318] option from the mount to silence this warning. [ 25.228936][ T318] ======================================================= [ 25.268494][ T318] incfs: ino conflict with backing FS 1 [ 25.269624][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.692455][ T322] loop3: detected capacity change from 0 to 131072 [ 25.704804][ T288] device veth1_macvtap entered promiscuous mode [ 25.711888][ T322] F2FS-fs (loop3): invalid crc value [ 25.743185][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.751538][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.773378][ T322] F2FS-fs (loop3): Found nat_bits in checkpoint [ 25.797713][ T290] device veth1_macvtap entered promiscuous mode [ 25.816051][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.817617][ T322] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 25.830631][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.841078][ T335] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 25.850115][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.866771][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.875120][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.929583][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.938878][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.940277][ T338] __vm_enough_memory: pid: 338, comm: syz.0.1, no enough memory for the allocation [ 25.948841][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.965192][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.077842][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.091740][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.099174][ T333] device bridge_slave_0 entered promiscuous mode [ 26.107134][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.114461][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.122043][ T333] device bridge_slave_1 entered promiscuous mode [ 26.178815][ T341] loop2: detected capacity change from 0 to 256 [ 26.352624][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.359708][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.367005][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.374040][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.416838][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.426275][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.440829][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.457633][ T324] device bridge_slave_1 left promiscuous mode [ 26.463870][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.471510][ T324] device bridge_slave_0 left promiscuous mode [ 26.477834][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.485949][ T324] device veth1_macvtap left promiscuous mode [ 26.492301][ T324] device veth0_vlan left promiscuous mode [ 26.632706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.641292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.649748][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.656796][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.664629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.673978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.682235][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.689259][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.702281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.710452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.718385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.726557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.728700][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 26.728711][ T28] audit: type=1400 audit(1790350636.827:175): avc: denied { setopt } for pid=361 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.741407][ T333] device veth0_vlan entered promiscuous mode [ 26.762118][ T28] audit: type=1400 audit(1790350636.827:176): avc: denied { write } for pid=361 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.776935][ T333] device veth1_macvtap entered promiscuous mode [ 26.791667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.800156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.810201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.818278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.827572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.835745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.844504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.852096][ T323] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.852595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.867059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.886287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.894466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.902954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.911145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.938125][ T28] audit: type=1400 audit(1790350637.037:177): avc: denied { create } for pid=367 comm="syz.5.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.988864][ T28] audit: type=1400 audit(1790350637.087:178): avc: denied { create } for pid=369 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.042880][ T28] audit: type=1400 audit(1790350637.147:179): avc: denied { read } for pid=371 comm="syz.2.17" dev="nsfs" ino=4026532581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.065048][ T323] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.081650][ T323] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.099348][ T323] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.110612][ T28] audit: type=1400 audit(1790350637.167:180): avc: denied { open } for pid=371 comm="syz.2.17" path="net:[4026532581]" dev="nsfs" ino=4026532581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.139944][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 27.156667][ T323] usb 4-1: SerialNumber: syz [ 27.161950][ T28] audit: type=1400 audit(1790350637.167:181): avc: denied { create } for pid=371 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.202008][ T28] audit: type=1400 audit(1790350637.177:182): avc: denied { setopt } for pid=371 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.242347][ T28] audit: type=1400 audit(1790350637.327:183): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.274003][ T374] Illegal XDP return value 4294967274 on prog (id 8) dev syz_tun, expect packet loss! [ 27.291789][ T28] audit: type=1400 audit(1790350637.367:184): avc: denied { getattr } for pid=373 comm="syz.1.18" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.300856][ T372] loop2: detected capacity change from 0 to 40427 [ 27.327777][ T372] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 27.334271][ T297] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.351656][ T372] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 27.360591][ T372] F2FS-fs (loop2): Unrecognized mount option "ÿÿÿÿ" or missing value [ 27.384506][ T323] usb 4-1: 0:2 : does not exist [ 27.392722][ T323] usb 4-1: USB disconnect, device number 2 [ 27.448242][ T374] mmap: syz.1.18 (374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.502485][ T372] loop2: detected capacity change from 0 to 256 [ 27.512295][ T372] exfat: Deprecated parameter 'utf8' [ 27.521664][ T368] loop5: detected capacity change from 0 to 131072 [ 27.523264][ T372] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 27.538182][ T368] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 27.542957][ T297] usb 1-1: Using ep0 maxpacket: 16 [ 27.553450][ T297] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.569370][ T297] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 27.578512][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.583495][ T368] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 27.588942][ T297] usb 1-1: config 0 descriptor?? [ 27.605075][ T368] F2FS-fs (loop5): invalid crc value [ 27.615023][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 27.642965][ T381] device-mapper: ioctl: Unable to interpret geometry settings. [ 27.643232][ T378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 27.659666][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.669431][ T368] F2FS-fs (loop5): Found nat_bits in checkpoint [ 27.676635][ T378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=378 comm=syz.1.19 [ 27.698622][ T381] loop2: detected capacity change from 0 to 1024 [ 27.709936][ T381] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 27.718858][ T381] EXT4-fs (loop2): orphan cleanup on readonly fs [ 27.724890][ T378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 27.732167][ T381] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.20: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 27.745994][ T378] loop1: detected capacity change from 0 to 256 [ 27.752201][ T381] EXT4-fs error (device loop2): ext4_quota_enable:7039: comm syz.2.20: Bad quota inode: 3, type: 0 [ 27.758058][ T368] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 27.768712][ T381] EXT4-fs warning (device loop2): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 27.778117][ T378] exfat: Unknown parameter '' [ 27.790191][ T381] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 27.801684][ T381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.801836][ T368] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 27.863037][ T290] EXT4-fs (loop2): unmounting filesystem. [ 27.864626][ T368] IPv6: addrconf: prefix option has invalid lifetime [ 27.875527][ T368] IPv6: addrconf: prefix option has invalid lifetime [ 27.908461][ T333] F2FS-fs (loop5): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 27.973789][ T390] loop3: detected capacity change from 0 to 4096 [ 28.024511][ T319] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.035528][ T297] input: HID 258a:6a88 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:258A:6A88.0001/input/input4 [ 28.060432][ T390] loop3: detected capacity change from 0 to 512 [ 28.074113][ T390] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.086758][ T394] netlink: 'syz.2.25': attribute type 49 has an invalid length. [ 28.102529][ T390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 28.114707][ T390] System zones: 1-12 [ 28.123008][ T390] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.24: missing EA_INODE flag [ 28.141773][ T390] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.24: error while reading EA inode 12 err=-117 [ 28.143514][ T297] itetech 0003:258A:6A88.0001: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.0-1/input0 [ 28.167927][ T390] EXT4-fs (loop3): 1 orphan inode deleted [ 28.181818][ T390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.231574][ T392] F2FS-fs (loop1): invalid crc value [ 28.242203][ T399] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.22: iget: bad i_size value: 38620345925642 [ 28.264901][ T399] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.22: couldn't read orphan inode 15 (err -117) [ 28.291925][ T399] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 28.322310][ T392] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.355839][ T297] usb 1-1: USB disconnect, device number 2 [ 28.428966][ T392] F2FS-fs (loop1): Start checkpoint disabled! [ 28.436763][ T392] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 28.445421][ T392] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 28.507649][ T407] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.22: bg 0: block 5: invalid block bitmap [ 28.529813][ T407] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 28.542398][ T407] EXT4-fs (loop5): This should not happen!! Data will be lost [ 28.542398][ T407] [ 28.552140][ T407] EXT4-fs (loop5): Total free blocks count 0 [ 28.558189][ T407] EXT4-fs (loop5): Free/Dirty block details [ 28.564230][ T407] EXT4-fs (loop5): free_blocks=0 [ 28.566254][ T392] netlink: 48 bytes leftover after parsing attributes in process `syz.1.23'. [ 28.585560][ T407] EXT4-fs (loop5): dirty_blocks=2416 [ 28.609072][ T407] EXT4-fs (loop5): Block reservation details [ 28.628159][ T407] EXT4-fs (loop5): i_reserved_data_blocks=2416 [ 28.847919][ T43] kworker/u4:2: attempt to access beyond end of device [ 28.847919][ T43] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 28.884478][ T8] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 360 with error 28 [ 28.921037][ T410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.976307][ T410] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.27: checksumming directory block 0 [ 29.040648][ T410] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.27: checksumming directory block 0 [ 29.140518][ T418] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.27: checksumming directory block 0 [ 29.195569][ T410] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.27: Directory block failed checksum [ 29.259765][ T290] EXT4-fs (loop2): unmounting filesystem. [ 29.267183][ T287] EXT4-fs (loop3): unmounting filesystem. [ 29.335585][ T431] ext4: Unknown parameter 'uid<00000000000000000000' [ 30.616595][ T446] set_capacity_and_notify: 6 callbacks suppressed [ 30.616611][ T446] loop0: detected capacity change from 0 to 4096 [ 30.690248][ T446] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.724510][ T446] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.768777][ T446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.782719][ T452] __vm_enough_memory: pid: 452, comm: syz.3.36, no enough memory for the allocation [ 30.834426][ T446] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 30.885100][ T429] loop1: detected capacity change from 0 to 131072 [ 30.905748][ T288] EXT4-fs (loop0): unmounting filesystem. [ 30.922439][ T429] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 30.951063][ T429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.989866][ T429] F2FS-fs (loop1): invalid crc value [ 31.009938][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.021334][ T456] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.052357][ T456] device bridge_slave_0 entered promiscuous mode [ 31.058747][ T429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.072609][ T324] device bridge_slave_1 left promiscuous mode [ 31.082010][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.099852][ T324] device bridge_slave_0 left promiscuous mode [ 31.114673][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.134762][ T324] device veth1_macvtap left promiscuous mode [ 31.142140][ T324] device veth0_vlan left promiscuous mode [ 31.152235][ T429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.159281][ T429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 31.316143][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.332960][ T456] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.347574][ T458] loop0: detected capacity change from 0 to 40427 [ 31.367266][ T458] F2FS-fs (loop0): invalid crc value [ 31.383190][ T456] device bridge_slave_1 entered promiscuous mode [ 31.401244][ T458] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.491797][ T458] F2FS-fs (loop0): Start checkpoint disabled! [ 31.513272][ T458] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 31.542719][ T458] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 31.553202][ T456] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.560242][ T456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.567543][ T456] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.574589][ T456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.605144][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.612754][ T479] FAULT_INJECTION: forcing a failure. [ 31.612754][ T479] name failslab, interval 1, probability 0, space 0, times 1 [ 31.625493][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.636511][ T447] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.639582][ T479] CPU: 1 PID: 479 Comm: syz.3.41 Not tainted syzkaller #0 [ 31.649938][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.660007][ T479] Call Trace: [ 31.663272][ T479] [ 31.666187][ T479] __dump_stack+0x21/0x24 [ 31.670511][ T479] dump_stack_lvl+0x110/0x170 [ 31.675172][ T479] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.680184][ T479] ? release_sock+0x169/0x1c0 [ 31.684848][ T479] dump_stack+0x15/0x24 [ 31.688988][ T479] should_fail_ex+0x3bf/0x510 [ 31.693646][ T479] __should_failslab+0xac/0xf0 [ 31.698398][ T479] should_failslab+0x9/0x20 [ 31.702887][ T479] kmem_cache_alloc_node+0x42/0x330 [ 31.708069][ T479] ? __alloc_skb+0xe8/0x4a0 [ 31.712557][ T479] __alloc_skb+0xe8/0x4a0 [ 31.716870][ T479] netlink_sendmsg+0x635/0xbd0 [ 31.721617][ T479] ? __cfi_netlink_sendmsg+0x10/0x10 [ 31.726884][ T479] ? security_socket_sendmsg+0x93/0xb0 [ 31.732325][ T479] ? __cfi_netlink_sendmsg+0x10/0x10 [ 31.737596][ T479] ____sys_sendmsg+0x5fb/0x9c0 [ 31.742344][ T479] ? __sys_sendmsg_sock+0x40/0x40 [ 31.747352][ T479] ? import_iovec+0x7c/0xb0 [ 31.751836][ T479] ___sys_sendmsg+0x2a2/0x360 [ 31.756498][ T479] ? __sys_sendmsg+0x290/0x290 [ 31.761246][ T479] ? __kasan_check_write+0x14/0x20 [ 31.766338][ T479] ? proc_fail_nth_write+0x180/0x200 [ 31.771606][ T479] ? vfs_write+0xa51/0xd00 [ 31.776002][ T479] ? __fdget+0x19c/0x220 [ 31.780228][ T479] __x64_sys_sendmsg+0x20d/0x2e0 [ 31.785151][ T479] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 31.790599][ T479] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 31.796649][ T479] x64_sys_call+0x171/0x9a0 [ 31.801137][ T479] do_syscall_64+0x4c/0xa0 [ 31.805537][ T479] ? clear_bhb_loop+0x30/0x80 [ 31.810202][ T479] ? clear_bhb_loop+0x30/0x80 [ 31.814864][ T479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.820737][ T479] RIP: 0033:0x7f843659e159 [ 31.825133][ T479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.844720][ T479] RSP: 002b:00007f843755d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.853113][ T479] RAX: ffffffffffffffda RBX: 00007f8436825fa0 RCX: 00007f843659e159 [ 31.861066][ T479] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 31.869018][ T479] RBP: 00007f843755d090 R08: 0000000000000000 R09: 0000000000000000 [ 31.876967][ T479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.884920][ T479] R13: 00007f8436826038 R14: 00007f8436825fa0 R15: 00007ffc09bc96f8 [ 31.892875][ T479] [ 31.916353][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.935009][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.944027][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.951056][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.958644][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.967498][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.974562][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.992031][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.012910][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.020958][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.037661][ T484] loop2: detected capacity change from 0 to 512 [ 32.041654][ T456] device veth0_vlan entered promiscuous mode [ 32.050378][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.063109][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.072797][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.081527][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.089864][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.097785][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.106612][ T484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.113880][ T456] device veth1_macvtap entered promiscuous mode [ 32.129004][ T484] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.43: checksumming directory block 0 [ 32.141293][ T458] netlink: 48 bytes leftover after parsing attributes in process `syz.0.37'. [ 32.150593][ T484] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.43: checksumming directory block 0 [ 32.163820][ T484] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.43: checksumming directory block 0 [ 32.179487][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.187835][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.202057][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.210075][ T484] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.43: Directory block failed checksum [ 32.232030][ T491] tipc: MTU too low for tipc bearer [ 32.241335][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.265499][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.274990][ T290] EXT4-fs (loop2): unmounting filesystem. [ 32.281198][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.341418][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.378786][ T496] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 32.861886][ T499] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.069496][ T324] kworker/u4:5: attempt to access beyond end of device [ 33.069496][ T324] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 33.091732][ T499] usb 3-1: Using ep0 maxpacket: 16 [ 33.098031][ T499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.132869][ T499] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.157377][ T499] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.173553][ T499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.213646][ T499] usb 3-1: Product: syz [ 33.221854][ T499] usb 3-1: Manufacturer: syz [ 33.238038][ T499] usb 3-1: SerialNumber: syz [ 33.444018][ T513] __vm_enough_memory: pid: 513, comm: syz.3.49, no enough memory for the allocation [ 33.454737][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 33.456103][ T28] audit: type=1400 audit(1790350643.557:229): avc: denied { ioctl } for pid=502 comm="syz.2.46" path="socket:[16832]" dev="sockfs" ino=16832 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.487923][ T499] usb 3-1: 0:2 : does not exist [ 33.498574][ T499] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 33.550503][ T28] audit: type=1400 audit(1790350643.557:230): avc: denied { getopt } for pid=502 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.571757][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.592191][ T499] usb 3-1: USB disconnect, device number 2 [ 33.685711][ T28] audit: type=1400 audit(1790350643.787:231): avc: denied { map } for pid=519 comm="syz.1.52" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.706172][ T511] loop6: detected capacity change from 0 to 131072 [ 33.719384][ T511] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24) [ 33.727269][ T511] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 33.730215][ T520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 33.735471][ T511] F2FS-fs (loop6): Test dummy encryption mode enabled [ 33.751990][ T511] F2FS-fs (loop6): invalid crc value [ 33.760463][ T28] audit: type=1400 audit(1790350643.807:232): avc: denied { read write } for pid=519 comm="syz.1.52" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.785697][ T511] F2FS-fs (loop6): Found nat_bits in checkpoint [ 33.815905][ T511] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 33.827836][ T511] F2FS-fs (loop6): Start checkpoint disabled! [ 33.835010][ T511] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 33.847093][ T520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.52'. [ 33.856213][ T511] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 33.863287][ T511] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 33.873194][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.921747][ T28] audit: type=1400 audit(1790350643.827:233): avc: denied { create } for pid=519 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.975993][ T28] audit: type=1400 audit(1790350643.827:234): avc: denied { write } for pid=519 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.008820][ T28] audit: type=1400 audit(1790350643.967:235): avc: denied { link } for pid=510 comm="syz.6.48" name="file1" dev="loop6" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.197177][ T509] loop0: detected capacity change from 0 to 131072 [ 34.206014][ T539] loop2: detected capacity change from 0 to 512 [ 34.224004][ T509] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 34.241940][ T509] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.246723][ T324] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 34.250940][ T509] F2FS-fs (loop0): invalid crc value [ 34.267254][ T509] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.275613][ T539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.325539][ T549] loop1: detected capacity change from 0 to 512 [ 34.333527][ T539] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.55: checksumming directory block 0 [ 34.351849][ T509] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.355266][ T539] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.55: checksumming directory block 0 [ 34.359147][ T509] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 34.372922][ T539] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.55: checksumming directory block 0 [ 34.409723][ T549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.428779][ T549] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.452038][ T552] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.55: Directory block failed checksum [ 34.464535][ T307] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.493613][ T549] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.57: corrupted xattr block 33 [ 34.507362][ T554] loop6: detected capacity change from 0 to 1024 [ 34.524350][ T554] EXT4-fs (loop6): Can't support bigalloc feature without extents feature [ 34.524350][ T554] [ 34.537773][ T554] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 34.556459][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 34.565870][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.571804][ T549] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.57: corrupted xattr block 33 [ 34.584725][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 34.630699][ T28] audit: type=1400 audit(1790350644.727:236): avc: denied { write } for pid=548 comm="syz.1.57" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.638905][ T549] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.57: corrupted xattr block 33 [ 34.653140][ T28] audit: type=1400 audit(1790350644.737:237): avc: denied { write } for pid=559 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.664495][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 34.685146][ T28] audit: type=1400 audit(1790350644.737:238): avc: denied { nlmsg_write } for pid=559 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.715773][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 34.722468][ T549] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.57: corrupted xattr block 33 [ 34.741967][ T549] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.57: corrupted xattr block 33 [ 34.759074][ T568] __vm_enough_memory: pid: 568, comm: syz.6.64, no enough memory for the allocation [ 34.768748][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 34.795313][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.805692][ T307] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.816581][ T307] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.826639][ T307] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 34.827143][ T286] EXT4-fs (loop1): unmounting filesystem. [ 34.839684][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.851892][ T307] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 34.861008][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.871951][ T307] usb 4-1: config 0 descriptor?? [ 34.923099][ T570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 35.050397][ T6] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 35.105136][ T574] loop1: detected capacity change from 0 to 8192 [ 35.116552][ T576] netlink: 'syz.6.66': attribute type 17 has an invalid length. [ 35.126269][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 35.234284][ T584] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 35.243185][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.244875][ T584] EXT4-fs (loop6): shut down requested (2) [ 35.257187][ T6] usb 3-1: not running at top speed; connect to a high speed hub [ 35.265810][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.276138][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.285129][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29794, setting to 64 [ 35.297646][ T6] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 35.306835][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 35.314935][ T6] usb 3-1: Product: syz [ 35.319163][ T6] usb 3-1: Manufacturer: syz [ 35.328564][ T556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.337589][ T6] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 35.340330][ T307] logitech-djreceiver 0003:046D:C53A.0002: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 35.357302][ T6] usb 3-1: No streaming interface found for terminal 2. [ 35.380055][ T6] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 35.552783][ T583] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 35.558409][ T6] usb 3-1: USB disconnect, device number 3 [ 35.565493][ T570] syz.0.61 (570) used greatest stack depth: 20888 bytes left [ 35.567936][ T583] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.590174][ T583] F2FS-fs (loop1): invalid crc value [ 35.619765][ T583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.635133][ T592] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.647713][ T592] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.70: checksumming directory block 0 [ 35.660773][ T592] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.70: checksumming directory block 0 [ 35.661112][ T583] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 35.673661][ T592] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.70: Directory block failed checksum [ 35.679722][ T583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 35.707119][ T288] EXT4-fs (loop0): unmounting filesystem. [ 35.735699][ T597] Zero length message leads to an empty skb [ 35.781390][ T604] device veth0_to_team entered promiscuous mode [ 35.789179][ T604] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 35.851352][ T606] xt_hashlimit: size too large, truncated to 1048576 [ 35.995017][ T614] set_capacity_and_notify: 3 callbacks suppressed [ 35.995034][ T614] loop1: detected capacity change from 0 to 512 [ 36.044955][ T456] EXT4-fs (loop6): unmounting filesystem. [ 36.062016][ T24] usb 4-1: USB disconnect, device number 3 [ 36.100484][ T622] __vm_enough_memory: pid: 622, comm: syz.6.77, no enough memory for the allocation [ 36.171817][ T307] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.195176][ T626] loop6: detected capacity change from 0 to 512 [ 36.209001][ T626] EXT4-fs (loop6): 1 truncate cleaned up [ 36.214868][ T626] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 36.283590][ T630] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.80: bg 0: block 465: padding at end of block bitmap is not set [ 36.297934][ T630] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 36.307094][ T630] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.80: invalid indirect mapped block 234881024 (level 0) [ 36.351736][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 36.358087][ T307] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.369168][ T307] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.382339][ T307] usb 1-1: config 0 interface 0 has no altsetting 0 [ 36.389095][ T307] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 36.398526][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.412098][ T307] usb 1-1: config 0 descriptor?? [ 36.453369][ T456] EXT4-fs (loop6): unmounting filesystem. [ 36.468223][ T632] netlink: 'syz.6.81': attribute type 4 has an invalid length. [ 36.899568][ T634] loop1: detected capacity change from 0 to 512 [ 36.913842][ T634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.923835][ T634] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.82: checksumming directory block 0 [ 36.946014][ T634] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.82: checksumming directory block 0 [ 36.959829][ T634] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.82: Directory block failed checksum [ 36.984930][ T286] EXT4-fs (loop1): unmounting filesystem. [ 37.024000][ T642] loop1: detected capacity change from 0 to 512 [ 37.045084][ T642] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.065829][ T642] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.090928][ T647] loop6: detected capacity change from 0 to 2048 [ 37.097476][ T642] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 37.126580][ T642] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.84: Corrupt directory, running e2fsck is recommended [ 37.140469][ T642] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 37.149717][ T647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 37.151811][ T642] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.84: corrupted in-inode xattr [ 37.176036][ T647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=769 sclass=netlink_tcpdiag_socket pid=647 comm=syz.6.87 [ 37.188806][ T642] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.84: couldn't read orphan inode 15 (err -117) [ 37.208282][ T642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.244290][ T456] EXT4-fs (loop6): unmounting filesystem. [ 37.297911][ T286] EXT4-fs (loop1): unmounting filesystem. [ 37.349384][ T655] loop1: detected capacity change from 0 to 4096 [ 37.376125][ T659] loop6: detected capacity change from 0 to 512 [ 37.388011][ T655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.402248][ T659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.406902][ T655] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.416321][ T659] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 37.426678][ T659] EXT4-fs (loop6): 1 truncate cleaned up [ 37.432467][ T659] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 37.436321][ T638] loop3: detected capacity change from 0 to 131072 [ 37.446064][ T659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=659 comm=syz.6.92 [ 37.449231][ T655] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 37.468245][ T638] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 37.475262][ T638] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.484385][ T655] System zones: 0-5 [ 37.490877][ T638] F2FS-fs (loop3): invalid crc value [ 37.497014][ T655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.506739][ T456] EXT4-fs (loop6): unmounting filesystem. [ 37.528589][ T638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.546137][ T666] loop6: detected capacity change from 0 to 512 [ 37.596793][ T286] EXT4-fs (loop1): unmounting filesystem. [ 37.610596][ T638] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.617842][ T638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 37.796310][ T666] syz.6.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.820364][ T671] loop3: detected capacity change from 0 to 512 [ 37.843148][ T671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.866005][ T671] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.95: checksumming directory block 0 [ 37.878528][ T671] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.95: Directory block failed checksum [ 37.896299][ T287] EXT4-fs (loop3): unmounting filesystem. [ 37.931787][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.008231][ T676] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 38.016032][ T676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 38.024718][ T676] F2FS-fs (loop3): invalid crc value [ 38.031447][ T676] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.059906][ T676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 38.067010][ T676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.081816][ T24] usb 2-1: device descriptor read/64, error -71 [ 38.253513][ T686] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 38.261385][ T686] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 38.270239][ T686] F2FS-fs (loop3): invalid crc value [ 38.276768][ T686] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.305639][ T686] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 38.312761][ T686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.362621][ T24] usb 2-1: device descriptor read/64, error -71 [ 38.598135][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 38.598148][ T28] audit: type=1400 audit(1790350648.697:301): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 38.661757][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.785343][ T307] usbhid 1-1:0.0: can't add hid device: -71 [ 38.794093][ T307] usbhid: probe of 1-1:0.0 failed with error -71 [ 38.802884][ T307] usb 1-1: USB disconnect, device number 3 [ 38.821741][ T24] usb 2-1: device descriptor read/64, error -71 [ 39.002254][ T19] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 39.091754][ T24] usb 2-1: device descriptor read/64, error -71 [ 39.193094][ T19] usb 7-1: unable to get BOS descriptor or descriptor too short [ 39.205830][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.221539][ T714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.231809][ T24] usb usb2-port1: attempt power cycle [ 39.239699][ T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.258841][ T714] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.107: checksumming directory block 0 [ 39.277694][ T19] usb 7-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 39.296048][ T714] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.107: Directory block failed checksum [ 39.309646][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.327209][ T19] usb 7-1: Product: äºç–㷔泖ࡗ촙ì晕傉ꎈ⟞䄠㡔雪䦼떜íŸéœ«ã¿ªå·ˆé»¿á«…跕హ洹ᤣᲕëŒæ˜¸î¥ë°—ń⇾თ꒮ⰽ毅çºê‚´ê–™á³¦éªšà¯­î¦‰êµ£à¤«Ú¡å¸“ʬ쀉ᴀ鄲⡋㎺櫑䪧﷡꫞ã°á²šæž¦ç¿•ç®‰å®ì–…狠팢ќ豫㨾ꩳ⑄躯縇ꯥéœèŠ´å‘â†ï¹šížªã¸žî¬¾î¥žâ¡—虔惞㙟হ뵂夾㎾Ŷ뢤鳦毊䀋껤졧쀓á£ë½¨é°Œä€Šæ˜•ç¡¥ê¨…å±£ [ 39.369043][ T710] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 39.388726][ T710] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.400276][ T290] EXT4-fs (loop2): unmounting filesystem. [ 39.402930][ T19] usb 7-1: Manufacturer: å¡æ¤°âµ›ã•¤ì¶œæ £é©·î‚墉埖曻ﭖ喼㤰湿ꭩᘭ똮뜭螠떚â”꾴褨ᧈ慬奂闘챓鄿移볻á½â²‚ꔼ厭ꞈۓ䩻林㋘쎫å¥ã±œå¢¯ê°¡ç§ à§³é«‘诉ᬓ嶪è–풎ᜡ饃줬툤ì·ê¥¤ïˆ†ï«¾Ê·á¿€á¬«í㮆ꑲæ›ë¯ã‘£ëž—쌊苤௶ì²æ©ë„ å‘싎袘㷮಴嫌氘懚뺕笷餮ç¤ã½•ë˜°é¹æ¦‡ëž²ê¤€ä™¬â¬…䵤帲쥒ዠ謣 [ 39.437784][ T710] F2FS-fs (loop0): invalid crc value [ 39.443700][ T19] usb 7-1: SerialNumber: 뜽졉爫炗ꉦ뮬ïˆïž²ìƒˆã®ä•ê¬î‚“抺檅鬟á£æ—Œï‡­è„žé •è‚‘鶴鬳蠷뱊ߡ [ 39.472079][ T719] netlink: 'syz.2.108': attribute type 17 has an invalid length. [ 39.483733][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.484345][ T710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.538562][ T710] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.545702][ T28] audit: type=1326 audit(1790350649.637:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.551615][ T710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 39.581041][ T28] audit: type=1326 audit(1790350649.637:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.629112][ T28] audit: type=1326 audit(1790350649.637:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.718818][ T704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.727182][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.738426][ T28] audit: type=1326 audit(1790350649.637:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.763285][ T28] audit: type=1326 audit(1790350649.637:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.789057][ T28] audit: type=1326 audit(1790350649.637:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.821500][ T28] audit: type=1326 audit(1790350649.637:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 39.847986][ T704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.855930][ T24] usb 2-1: device descriptor read/8, error -71 [ 39.878888][ T28] audit: type=1326 audit(1790350649.637:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=724 comm="syz.2.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522a19e159 code=0x7ffc0000 [ 40.025953][ T742] ext4: Unknown parameter '' [ 40.052807][ T24] usb 2-1: device descriptor read/8, error -71 [ 40.070305][ T28] audit: type=1400 audit(1790350649.757:310): avc: denied { bind } for pid=727 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.541834][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.603143][ T24] usb 2-1: device descriptor read/8, error -71 [ 40.658725][ T19] usb 7-1: USB disconnect, device number 2 [ 40.713080][ T755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.117'. [ 40.794033][ T758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.805195][ T758] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.828630][ T758] EXT4-fs (loop0): shut down requested (1) [ 40.830668][ T760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.849047][ T760] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.119: Directory block failed checksum [ 40.852513][ T24] usb 2-1: device descriptor read/8, error -71 [ 40.872422][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.875750][ T770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.120'. [ 40.903558][ T288] EXT4-fs (loop0): unmounting filesystem. [ 41.002045][ T24] usb usb2-port1: unable to enumerate USB device [ 41.802411][ T286] EXT4-fs (loop1): unmounting filesystem. [ 41.909354][ T791] __vm_enough_memory: pid: 791, comm: syz.0.128, no enough memory for the allocation [ 42.074273][ T773] set_capacity_and_notify: 9 callbacks suppressed [ 42.074290][ T773] loop3: detected capacity change from 0 to 131072 [ 42.107954][ T773] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 42.115340][ T773] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.145391][ T773] F2FS-fs (loop3): invalid crc value [ 42.173071][ T773] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.179771][ T805] loop0: detected capacity change from 0 to 512 [ 42.193936][ T805] ext4: Unknown parameter 'obj_role' [ 42.237614][ T807] loop0: detected capacity change from 0 to 512 [ 42.254313][ T773] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 42.262880][ T773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 42.295188][ T807] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.317565][ T799] loop2: detected capacity change from 0 to 40427 [ 42.335333][ T799] F2FS-fs (loop2): invalid crc value [ 42.352794][ T288] EXT4-fs (loop0): unmounting filesystem. [ 42.367186][ T799] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.475540][ T799] F2FS-fs (loop2): Start checkpoint disabled! [ 42.492659][ T832] __vm_enough_memory: pid: 832, comm: syz.0.142, no enough memory for the allocation [ 42.504230][ T799] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 42.504276][ T835] loop3: detected capacity change from 0 to 256 [ 42.517941][ T799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 42.591117][ T844] loop1: detected capacity change from 0 to 512 [ 42.599470][ T835] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 42.661733][ T844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.725511][ T286] EXT4-fs (loop1): unmounting filesystem. [ 42.788615][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.803872][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.815958][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.826686][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.838151][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.847183][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.857172][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.865544][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.877408][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.885564][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 42.901733][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.072426][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 43.091043][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.092100][ T19] usb 4-1: too many configurations: 23, using maximum allowed: 8 [ 43.109154][ T24] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 43.127858][ T19] usb 4-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 43.128382][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.141036][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 43.146385][ T842] loop6: detected capacity change from 0 to 131072 [ 43.161386][ T24] usb 3-1: Found UVC 1.00 device (0000:0000) [ 43.166276][ T19] usb 4-1: SerialNumber: syz [ 43.173223][ T842] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 43.173732][ T19] usb 4-1: config 0 descriptor?? [ 43.185206][ T842] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 43.194212][ T19] usb 4-1: bad CDC descriptors [ 43.199340][ T842] F2FS-fs (loop6): invalid crc value [ 43.216996][ T842] F2FS-fs (loop6): Found nat_bits in checkpoint [ 43.255834][ T842] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 43.264239][ T842] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 43.652564][ T883] loop6: detected capacity change from 0 to 512 [ 43.692737][ T887] __vm_enough_memory: pid: 887, comm: syz.0.159, no enough memory for the allocation [ 43.726976][ T883] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 43.751481][ T456] EXT4-fs (loop6): unmounting filesystem. [ 43.786197][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 43.786242][ T28] audit: type=1400 audit(1790350653.887:340): avc: denied { bind } for pid=891 comm="syz.6.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.833591][ T28] audit: type=1400 audit(1790350653.917:341): avc: denied { map } for pid=891 comm="syz.6.160" path="socket:[19514]" dev="sockfs" ino=19514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.873167][ T28] audit: type=1400 audit(1790350653.917:342): avc: denied { map } for pid=891 comm="syz.6.160" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.898787][ T28] audit: type=1400 audit(1790350653.977:343): avc: denied { accept } for pid=881 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.942466][ T24] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 43.961933][ T24] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 43.976177][ T447] kworker/u4:6: attempt to access beyond end of device [ 43.976177][ T447] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 43.986191][ T24] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 44.009770][ T447] kworker/u4:6: attempt to access beyond end of device [ 44.009770][ T447] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 44.014085][ T24] usb 3-1: USB disconnect, device number 4 [ 44.115040][ T897] loop0: detected capacity change from 0 to 40427 [ 44.132935][ T897] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 44.139466][ T897] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 44.155793][ T897] F2FS-fs (loop0): invalid crc value [ 44.184419][ T897] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 44.276381][ T897] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 44.284607][ T897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.328597][ T28] audit: type=1400 audit(1790350654.427:344): avc: denied { read write } for pid=896 comm="syz.0.161" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 44.369594][ T288] syz-executor: attempt to access beyond end of device [ 44.369594][ T288] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.373983][ T28] audit: type=1400 audit(1790350654.457:345): avc: denied { open } for pid=896 comm="syz.0.161" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 44.408246][ T28] audit: type=1400 audit(1790350654.457:346): avc: denied { mounton } for pid=896 comm="syz.0.161" path="/30/file1/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.743363][ T28] audit: type=1400 audit(1790350654.847:347): avc: denied { mounton } for pid=915 comm="syz.1.167" path="/34/proc" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.773020][ T921] loop1: detected capacity change from 0 to 128 [ 44.790764][ T900] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 44.819856][ T900] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 44.838517][ T900] F2FS-fs (loop6): invalid crc value [ 44.855741][ T900] F2FS-fs (loop6): Found nat_bits in checkpoint [ 44.862075][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.953736][ T900] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 44.960982][ T900] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 45.061746][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 45.071425][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.082794][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.105063][ T931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.122389][ T931] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.170: Directory block failed checksum [ 45.136929][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.151620][ T290] EXT4-fs (loop2): unmounting filesystem. [ 45.166880][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.176492][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.176871][ T936] __vm_enough_memory: pid: 936, comm: syz.2.171, no enough memory for the allocation [ 45.185302][ T24] usb 1-1: config 0 descriptor?? [ 45.269121][ T28] audit: type=1400 audit(1790350655.367:348): avc: denied { getopt } for pid=939 comm="syz.1.173" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.416435][ T28] audit: type=1400 audit(1790350655.517:349): avc: denied { load_policy } for pid=952 comm="syz.6.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.442015][ T953] SELinux: failed to load policy [ 45.448026][ T953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.177'. [ 45.511222][ T307] usb 4-1: USB disconnect, device number 4 [ 45.555163][ T966] __vm_enough_memory: pid: 966, comm: syz.3.183, no enough memory for the allocation [ 45.636899][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input6 [ 45.739167][ T24] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 45.751803][ T499] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 45.828859][ T24] usb 1-1: USB disconnect, device number 4 [ 45.911737][ T499] usb 7-1: device descriptor read/64, error -71 [ 45.916729][ T974] netlink: 'syz.3.185': attribute type 5 has an invalid length. [ 45.952251][ T976] exfat: Unknown parameter 'à [ 45.952251][ T976] ºÐ‘³Ž]ä [ 45.952251][ T976] ¹Â.î®sEÜõ®¨+抻ι’®”kéZ¹V®µ{صqm];÷ˆ{Ä' [ 46.040278][ T959] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 46.047339][ T959] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 46.055948][ T959] F2FS-fs (loop1): invalid crc value [ 46.063158][ T959] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.086453][ T959] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 46.093767][ T959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 46.221746][ T499] usb 7-1: device descriptor read/64, error -71 [ 46.232714][ T323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.411735][ T323] usb 4-1: Using ep0 maxpacket: 16 [ 46.418065][ T323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.428773][ T323] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.441765][ T323] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.452216][ T323] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 46.465048][ T323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 46.471650][ T323] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 46.480874][ T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.482431][ T997] process 'syz.2.192' launched './file0' with NULL argv: empty string added [ 46.492287][ T323] usb 4-1: config 0 descriptor?? [ 46.497787][ T499] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 46.524810][ T1005] __vm_enough_memory: pid: 1005, comm: syz.0.195, no enough memory for the allocation [ 46.615580][ T1011] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 46.661732][ T499] usb 7-1: device descriptor read/64, error -71 [ 46.876605][ T1009] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 46.883421][ T1009] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 46.891995][ T1009] F2FS-fs (loop2): invalid crc value [ 46.898880][ T1009] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.930570][ T1009] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 46.937711][ T499] usb 7-1: device descriptor read/64, error -71 [ 46.941583][ T1009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 46.977630][ T323] usbhid 4-1:0.0: can't add hid device: -71 [ 46.983740][ T323] usbhid: probe of 4-1:0.0 failed with error -71 [ 46.993112][ T323] usb 4-1: USB disconnect, device number 5 [ 47.061906][ T499] usb usb7-port1: attempt power cycle [ 47.108954][ T1022] set_capacity_and_notify: 6 callbacks suppressed [ 47.108966][ T1022] loop2: detected capacity change from 0 to 512 [ 47.123781][ T1022] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.130901][ T1022] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 47.140468][ T1022] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 47.148190][ T1022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.163702][ T1022] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.201: Directory hole found for htree leaf block 0 [ 47.169508][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 47.185614][ T1025] device bridge_slave_1 left promiscuous mode [ 47.192332][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.192720][ T290] EXT4-fs (loop2): unmounting filesystem. [ 47.205391][ T1025] device bridge_slave_0 left promiscuous mode [ 47.211507][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.238803][ T1030] loop2: detected capacity change from 0 to 4096 [ 47.248001][ T1030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.257207][ T1030] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.266644][ T1030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.277804][ T1030] fscrypt: AES-256-XTS using blk-crypto-fallback [ 47.481794][ T499] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 47.527624][ T499] usb 7-1: device descriptor read/8, error -71 [ 47.703124][ T499] usb 7-1: device descriptor read/8, error -71 [ 47.938337][ T1041] overlayfs: failed to resolve './file0': -2 [ 47.991778][ T499] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 48.043532][ T499] usb 7-1: device descriptor read/8, error -71 [ 48.128203][ T1040] loop3: detected capacity change from 0 to 1024 [ 48.183352][ T1053] __vm_enough_memory: pid: 1053, comm: syz.1.207, no enough memory for the allocation [ 48.228898][ T290] EXT4-fs (loop2): unmounting filesystem. [ 48.268136][ T1063] loop0: detected capacity change from 0 to 512 [ 48.283813][ T499] usb 7-1: device descriptor read/8, error -71 [ 48.290843][ T1063] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.350778][ T1072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 48.401875][ T499] usb usb7-port1: unable to enumerate USB device [ 48.606236][ T1065] loop2: detected capacity change from 0 to 131072 [ 48.613541][ T1065] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 48.620237][ T1065] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.629980][ T1065] F2FS-fs (loop2): invalid crc value [ 48.644960][ T1065] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.684267][ T1089] __vm_enough_memory: pid: 1089, comm: syz.0.220, no enough memory for the allocation [ 48.697869][ T1065] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.706682][ T1065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 48.830384][ T1100] FAULT_INJECTION: forcing a failure. [ 48.830384][ T1100] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.870668][ T1100] CPU: 1 PID: 1100 Comm: syz.3.226 Not tainted syzkaller #0 [ 48.877964][ T1100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.888020][ T1100] Call Trace: [ 48.891301][ T1100] [ 48.894231][ T1100] __dump_stack+0x21/0x24 [ 48.898566][ T1100] dump_stack_lvl+0x110/0x170 [ 48.903244][ T1100] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.908279][ T1100] dump_stack+0x15/0x24 [ 48.912450][ T1100] should_fail_ex+0x3bf/0x510 [ 48.917125][ T1100] should_fail+0xb/0x10 [ 48.921286][ T1100] should_fail_usercopy+0x1a/0x20 [ 48.926314][ T1100] _copy_from_user+0x1e/0xc0 [ 48.930913][ T1100] iovec_from_user+0x1aa/0x2e0 [ 48.935675][ T1100] ? __kasan_check_write+0x14/0x20 [ 48.940795][ T1100] __import_iovec+0x6d/0x460 [ 48.945103][ T1105] loop2: detected capacity change from 0 to 512 [ 48.945383][ T1100] import_iovec+0x7c/0xb0 [ 48.945403][ T1100] do_preadv+0x1f8/0x390 [ 48.960144][ T1100] ? vfs_writev+0x5f0/0x5f0 [ 48.964653][ T1100] ? __kasan_check_write+0x14/0x20 [ 48.969763][ T1100] ? fput+0x154/0x1a0 [ 48.973737][ T1100] __x64_sys_preadv+0x9e/0xb0 [ 48.978395][ T1100] x64_sys_call+0x370/0x9a0 [ 48.982881][ T1100] do_syscall_64+0x4c/0xa0 [ 48.987281][ T1100] ? clear_bhb_loop+0x30/0x80 [ 48.991941][ T1100] ? clear_bhb_loop+0x30/0x80 [ 48.996602][ T1100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.002480][ T1100] RIP: 0033:0x7f843659e159 [ 49.006879][ T1100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.026470][ T1100] RSP: 002b:00007f843755d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 49.034897][ T1100] RAX: ffffffffffffffda RBX: 00007f8436825fa0 RCX: 00007f843659e159 [ 49.042851][ T1100] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 49.050807][ T1100] RBP: 00007f843755d090 R08: 0000000000000000 R09: 0000000000000000 [ 49.058763][ T1100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.066716][ T1100] R13: 00007f8436826038 R14: 00007f8436825fa0 R15: 00007ffc09bc96f8 [ 49.074673][ T1100] [ 49.084585][ T1107] overlayfs: unrecognized mount option "" or missing value [ 49.103699][ T1107] overlayfs: unrecognized mount option "" or missing value [ 49.130166][ T1105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.141227][ T1105] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.223163][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 49.223176][ T28] audit: type=1400 audit(1790350659.327:368): avc: denied { mount } for pid=1116 comm="syz.1.230" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.484097][ T290] EXT4-fs (loop2): unmounting filesystem. [ 49.505014][ T1129] __vm_enough_memory: pid: 1129, comm: syz.2.233, no enough memory for the allocation [ 49.540799][ T28] audit: type=1400 audit(1790350659.637:369): avc: denied { search } for pid=1130 comm="syz.2.234" name="/" dev="configfs" ino=13170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.662483][ T1137] program syz.2.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.707163][ T1139] loop0: detected capacity change from 0 to 4096 [ 49.728738][ T1141] loop2: detected capacity change from 0 to 256 [ 49.737430][ T1139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.749121][ T1139] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.759176][ T1141] FAT-fs (loop2): Directory bread(block 1285) failed [ 49.770701][ T1141] FAT-fs (loop2): Directory bread(block 1286) failed [ 49.777623][ T1141] FAT-fs (loop2): Directory bread(block 1287) failed [ 49.785709][ T1139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.810374][ T1141] FAT-fs (loop2): Directory bread(block 1288) failed [ 49.865737][ T28] audit: type=1400 audit(1790350659.937:370): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.900819][ T1141] FAT-fs (loop2): Directory bread(block 1285) failed [ 49.918515][ T1141] FAT-fs (loop2): Directory bread(block 1286) failed [ 49.931754][ T1141] FAT-fs (loop2): Directory bread(block 1287) failed [ 49.943944][ T1141] FAT-fs (loop2): Directory bread(block 1288) failed [ 50.001047][ T1141] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 50.594529][ T28] audit: type=1400 audit(1790350660.697:371): avc: denied { search } for pid=1149 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.665860][ T28] audit: type=1400 audit(1790350660.727:372): avc: denied { read write } for pid=1149 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 syzkaller syzkaller login: [ 50.738743][ T28] audit: type=1400 audit(1790350660.727:373): avc: denied { open } for pid=1149 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 50.782242][ T28] audit: type=1400 audit(1790350660.727:374): avc: denied { lock } for pid=1149 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 50.804597][ T288] EXT4-fs (loop0): unmounting filesystem. [ 50.824632][ T297] smpboot: CPU 1 is now offline [ 50.859304][ T1162] FAULT_INJECTION: forcing a failure. [ 50.859304][ T1162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.934862][ T1166] __vm_enough_memory: pid: 1166, comm: syz.0.245, no enough memory for the allocation [ 50.961361][ T1162] CPU: 0 PID: 1162 Comm: syz.3.244 Not tainted syzkaller #0 [ 50.968657][ T1162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 50.978686][ T1162] Call Trace: [ 50.981943][ T1162] [ 50.984850][ T1162] __dump_stack+0x21/0x24 [ 50.989162][ T1162] dump_stack_lvl+0x110/0x170 [ 50.993818][ T1162] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.998825][ T1162] ? kstrtoull+0x137/0x1d0 [ 51.003231][ T1162] dump_stack+0x15/0x24 [ 51.007384][ T1162] should_fail_ex+0x3bf/0x510 [ 51.012051][ T1162] should_fail+0xb/0x10 [ 51.016183][ T1162] should_fail_usercopy+0x1a/0x20 [ 51.021190][ T1162] set_fd_set+0x2d/0x80 [ 51.025334][ T1162] core_sys_select+0x5d7/0x700 [ 51.030077][ T1162] ? __cfi_core_sys_select+0x10/0x10 [ 51.035340][ T1162] ? __cfi_set_user_sigmask+0x10/0x10 [ 51.040697][ T1162] ? __kasan_check_write+0x14/0x20 [ 51.045786][ T1162] ? mutex_unlock+0x8f/0x230 [ 51.050352][ T1162] __se_sys_pselect6+0x274/0x340 [ 51.055281][ T1162] ? __kasan_check_write+0x14/0x20 [ 51.060375][ T1162] ? __x64_sys_pselect6+0x100/0x100 [ 51.065551][ T1162] ? ksys_write+0x1fa/0x260 [ 51.070031][ T1162] ? __cfi_ksys_write+0x10/0x10 [ 51.074862][ T1162] __x64_sys_pselect6+0xe5/0x100 [ 51.079776][ T1162] x64_sys_call+0x1b0/0x9a0 [ 51.084271][ T1162] do_syscall_64+0x4c/0xa0 [ 51.088666][ T1162] ? clear_bhb_loop+0x30/0x80 [ 51.093318][ T1162] ? clear_bhb_loop+0x30/0x80 [ 51.097977][ T1162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.103858][ T1162] RIP: 0033:0x7f843659e159 [ 51.108249][ T1162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.127833][ T1162] RSP: 002b:00007f843755d028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 51.136221][ T1162] RAX: ffffffffffffffda RBX: 00007f8436825fa0 RCX: 00007f843659e159 [ 51.144170][ T1162] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000002000 [ 51.152119][ T1162] RBP: 00007f843755d090 R08: 0000000000000000 R09: 0000000000000000 [ 51.160067][ T1162] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 51.168014][ T1162] R13: 00007f8436826038 R14: 00007f8436825fa0 R15: 00007ffc09bc96f8 [ 51.175981][ T1162] [ 51.193598][ T1127] loop6: detected capacity change from 0 to 131072 [ 51.200826][ T28] audit: type=1400 audit(1790350660.797:375): avc: denied { execute_no_trans } for pid=1153 comm="syz.2.242" path="/47/file0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.249865][ T1127] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 51.281738][ T1127] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 51.332079][ T1127] F2FS-fs (loop6): invalid crc value [ 51.340260][ T28] audit: type=1400 audit(1790350660.997:376): avc: denied { connect } for pid=1163 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.378060][ T1127] F2FS-fs (loop6): Found nat_bits in checkpoint [ 51.431733][ T28] audit: type=1400 audit(1790350660.997:377): avc: denied { ioctl } for pid=1163 comm="syz.0.243" path="socket:[20212]" dev="sockfs" ino=20212 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.489414][ T1127] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 51.501730][ T1186] device vlan2 entered promiscuous mode [ 51.509369][ T1127] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 51.533596][ T1186] device bridge0 entered promiscuous mode [ 51.623017][ T1192] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 51.649302][ T1194] __vm_enough_memory: pid: 1194, comm: syz.2.257, no enough memory for the allocation [ 51.680457][ T1177] loop0: detected capacity change from 0 to 40427 [ 51.703813][ T1177] F2FS-fs (loop0): Unrecognized mount option "0xffffffffffffffff" or missing value [ 51.882535][ T1198] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.947769][ T1211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1211 comm=syz.6.264 [ 51.971744][ T1198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.011093][ T1220] FAULT_INJECTION: forcing a failure. [ 52.011093][ T1220] name failslab, interval 1, probability 0, space 0, times 0 [ 52.035051][ T1198] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.073414][ T1220] CPU: 0 PID: 1220 Comm: syz.2.267 Not tainted syzkaller #0 [ 52.080699][ T1220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 52.090731][ T1220] Call Trace: [ 52.093986][ T1220] [ 52.096891][ T1220] __dump_stack+0x21/0x24 [ 52.101202][ T1220] dump_stack_lvl+0x110/0x170 [ 52.105852][ T1220] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.110853][ T1220] ? __cfi_vfs_write+0x10/0x10 [ 52.115592][ T1220] dump_stack+0x15/0x24 [ 52.119726][ T1220] should_fail_ex+0x3bf/0x510 [ 52.124379][ T1220] __should_failslab+0xac/0xf0 [ 52.129117][ T1220] should_failslab+0x9/0x20 [ 52.133595][ T1220] __kmem_cache_alloc_node+0x3d/0x2d0 [ 52.138942][ T1220] ? __se_sys_memfd_create+0xf2/0x3c0 [ 52.144292][ T1220] ? ksys_write+0x1fa/0x260 [ 52.148770][ T1220] ? __se_sys_memfd_create+0xf2/0x3c0 [ 52.154119][ T1220] __kmalloc+0xa4/0x1e0 [ 52.158249][ T1220] ? strnlen_user+0x10d/0x190 [ 52.162902][ T1220] __se_sys_memfd_create+0xf2/0x3c0 [ 52.168073][ T1220] __x64_sys_memfd_create+0x5b/0x70 [ 52.173247][ T1220] x64_sys_call+0x235/0x9a0 [ 52.177744][ T1220] do_syscall_64+0x4c/0xa0 [ 52.182136][ T1220] ? clear_bhb_loop+0x30/0x80 [ 52.186785][ T1220] ? clear_bhb_loop+0x30/0x80 [ 52.191432][ T1220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.197296][ T1220] RIP: 0033:0x7f522a19e159 [ 52.201684][ T1220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.221263][ T1220] RSP: 002b:00007f522b054e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 52.229656][ T1220] RAX: ffffffffffffffda RBX: 0000000000000488 RCX: 00007f522a19e159 [ 52.237602][ T1220] RDX: 00007f522b054ee0 RSI: 0000000000000000 RDI: 00007f522a23524b [ 52.245544][ T1220] RBP: 0000200000001340 R08: 00000000ffffffff R09: 0000000000000000 [ 52.253496][ T1220] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000a00 [ 52.261440][ T1220] R13: 00007f522b054ee0 R14: 00007f522b054ea0 R15: 0000200000000080 [ 52.269388][ T1220] [ 52.276572][ T1223] set_capacity_and_notify: 2 callbacks suppressed [ 52.276582][ T1223] loop6: detected capacity change from 0 to 2048 [ 52.311364][ T1223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.345839][ T287] EXT4-fs (loop3): unmounting filesystem. [ 52.362511][ T1223] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 52.391936][ T1223] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 52.412585][ T1229] loop3: detected capacity change from 0 to 512 [ 52.419680][ T1223] EXT4-fs error (device loop6): __ext4_new_inode:1081: comm syz.6.264: reserved inode found cleared - inode=18 [ 52.437448][ T1229] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.472814][ T1223] netlink: 'syz.6.264': attribute type 4 has an invalid length. [ 52.480520][ T1229] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.500623][ T1223] netlink: 'syz.6.264': attribute type 4 has an invalid length. [ 52.510854][ T1229] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 52.526005][ T1229] System zones: 1-12 [ 52.534483][ T1229] EXT4-fs error (device loop3): __ext4_iget:5104: inode #11: block 2: comm syz.3.269: invalid block [ 52.558216][ T1229] EXT4-fs (loop3): Remounting filesystem read-only [ 52.572228][ T1229] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.269: couldn't read orphan inode 11 (err -117) [ 52.596909][ T1229] EXT4-fs (loop3): Remounting filesystem read-only [ 52.611058][ T1229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.655574][ T287] EXT4-fs (loop3): unmounting filesystem. [ 52.726989][ T1244] __vm_enough_memory: pid: 1244, comm: syz.3.272, no enough memory for the allocation [ 52.755438][ T1248] overlayfs: failed to resolve './file0': -2 [ 52.782070][ T456] EXT4-fs (loop6): unmounting filesystem. [ 52.841246][ T1255] capability: warning: `syz.6.276' uses 32-bit capabilities (legacy support in use) [ 52.901779][ T1217] loop0: detected capacity change from 0 to 131072 [ 52.930029][ T1264] FAULT_INJECTION: forcing a failure. [ 52.930029][ T1264] name failslab, interval 1, probability 0, space 0, times 0 [ 54.061696][ C0] sched: RT throttling activated [ 54.077614][ T1217] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 54.093718][ T1217] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 54.601582][ T1264] CPU: 0 PID: 1264 Comm: syz.6.282 Not tainted syzkaller #0 [ 54.608879][ T1264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.618910][ T1264] Call Trace: [ 54.622167][ T1264] [ 54.625078][ T1264] __dump_stack+0x21/0x24 [ 54.629388][ T1264] dump_stack_lvl+0x110/0x170 [ 54.634058][ T1264] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.639079][ T1264] dump_stack+0x15/0x24 [ 54.643209][ T1264] should_fail_ex+0x3bf/0x510 [ 54.647861][ T1264] ? sk_prot_alloc+0x5f/0x320 [ 54.652511][ T1264] __should_failslab+0xac/0xf0 [ 54.657257][ T1264] should_failslab+0x9/0x20 [ 54.661741][ T1264] kmem_cache_alloc+0x3b/0x320 [ 54.666481][ T1264] sk_prot_alloc+0x5f/0x320 [ 54.670960][ T1264] ? security_inode_alloc+0x33/0x120 [ 54.676234][ T1264] sk_alloc+0x3b/0x460 [ 54.680295][ T1264] __vsock_create+0x3e/0x940 [ 54.684877][ T1264] vsock_create+0x13b/0x3f0 [ 54.689374][ T1264] __sock_create+0x39e/0x7c0 [ 54.693938][ T1264] __sys_socket+0xcd/0x1a0 [ 54.698326][ T1264] __x64_sys_socket+0x7a/0x90 [ 54.702975][ T1264] x64_sys_call+0x449/0x9a0 [ 54.707481][ T1264] do_syscall_64+0x4c/0xa0 [ 54.711889][ T1264] ? clear_bhb_loop+0x30/0x80 [ 54.716543][ T1264] ? clear_bhb_loop+0x30/0x80 [ 54.721211][ T1264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.727079][ T1264] RIP: 0033:0x7fdff499e159 [ 54.731475][ T1264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.751057][ T1264] RSP: 002b:00007fdff5873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 54.759454][ T1264] RAX: ffffffffffffffda RBX: 00007fdff4c25fa0 RCX: 00007fdff499e159 [ 54.767401][ T1264] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 54.775364][ T1264] RBP: 00007fdff5873090 R08: 0000000000000000 R09: 0000000000000000 [ 54.783316][ T1264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.791262][ T1264] R13: 00007fdff4c26038 R14: 00007fdff4c25fa0 R15: 00007ffc9f23d878 [ 54.799214][ T1264] [ 54.808698][ T1217] F2FS-fs (loop0): invalid crc value [ 54.824632][ T1217] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.867658][ T1217] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 54.880432][ T1217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 54.945649][ T1289] overlayfs: failed to resolve './file0': -2 [ 54.976232][ T1291] overlayfs: failed to clone upperpath [ 54.989143][ T1291] overlayfs: failed to clone upperpath [ 55.002962][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 55.002970][ T28] audit: type=1400 audit(1790350665.107:389): avc: denied { bind } for pid=1290 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.068090][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.092186][ T1297] xt_hashlimit: size too large, truncated to 1048576 [ 55.110113][ T28] audit: type=1400 audit(1790350665.157:390): avc: denied { bind } for pid=1293 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.177939][ T1295] loop2: detected capacity change from 0 to 8192 [ 55.188410][ T28] audit: type=1400 audit(1790350665.157:391): avc: denied { name_bind } for pid=1293 comm="syz.2.289" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.227414][ T1301] __vm_enough_memory: pid: 1301, comm: syz.0.286, no enough memory for the allocation [ 55.247508][ T1295] FAT-fs (loop2): Unrecognized mount option "0x000000000000000418446744073709551615" or missing value [ 55.284958][ T28] audit: type=1400 audit(1790350665.157:392): avc: denied { node_bind } for pid=1293 comm="syz.2.289" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 55.312975][ T1303] loop0: detected capacity change from 0 to 512 [ 55.341750][ T28] audit: type=1400 audit(1790350665.177:393): avc: denied { create } for pid=1293 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 55.362286][ T319] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 55.467046][ T1308] FAULT_INJECTION: forcing a failure. [ 55.467046][ T1308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.501836][ T1308] CPU: 0 PID: 1308 Comm: syz.1.294 Not tainted syzkaller #0 [ 55.509126][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 55.519155][ T1308] Call Trace: [ 55.522410][ T1308] [ 55.525317][ T1308] __dump_stack+0x21/0x24 [ 55.529628][ T1308] dump_stack_lvl+0x110/0x170 [ 55.534288][ T1308] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.539316][ T1308] dump_stack+0x15/0x24 [ 55.543461][ T1308] should_fail_ex+0x3bf/0x510 [ 55.548117][ T1308] should_fail+0xb/0x10 [ 55.552248][ T1308] should_fail_usercopy+0x1a/0x20 [ 55.557252][ T1308] _copy_from_user+0x1e/0xc0 [ 55.561853][ T1308] __sys_bpf+0x2a0/0x850 [ 55.566076][ T1308] ? bpf_link_show_fdinfo+0x330/0x330 [ 55.571447][ T1308] ? __cfi_ksys_write+0x10/0x10 [ 55.576284][ T1308] ? debug_smp_processor_id+0x17/0x20 [ 55.581633][ T1308] __x64_sys_bpf+0x7c/0x90 [ 55.586022][ T1308] x64_sys_call+0x488/0x9a0 [ 55.590499][ T1308] do_syscall_64+0x4c/0xa0 [ 55.594895][ T1308] ? clear_bhb_loop+0x30/0x80 [ 55.599547][ T1308] ? clear_bhb_loop+0x30/0x80 [ 55.604202][ T1308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.610074][ T1308] RIP: 0033:0x7f0c5f59e159 [ 55.614471][ T1308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.634059][ T1308] RSP: 002b:00007f0c6047f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.642477][ T1308] RAX: ffffffffffffffda RBX: 00007f0c5f825fa0 RCX: 00007f0c5f59e159 [ 55.650425][ T1308] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 55.658370][ T1308] RBP: 00007f0c6047f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.666317][ T1308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.674263][ T1308] R13: 00007f0c5f826038 R14: 00007f0c5f825fa0 R15: 00007ffe40a95cb8 [ 55.682215][ T1308] [ 55.727108][ T28] audit: type=1400 audit(1790350665.827:394): avc: denied { map } for pid=1316 comm="syz.2.298" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.751727][ T323] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 55.770324][ T1319] overlayfs: failed to resolve './file0': -2 [ 55.783560][ T1321] loop2: detected capacity change from 0 to 512 [ 55.819464][ T28] audit: type=1400 audit(1790350665.917:395): avc: denied { mount } for pid=1320 comm="syz.2.300" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.879948][ T1327] __vm_enough_memory: pid: 1327, comm: syz.3.303, no enough memory for the allocation [ 55.907081][ T1329] loop2: detected capacity change from 0 to 256 [ 55.921813][ T323] usb 1-1: device descriptor read/64, error -71 [ 55.939731][ T28] audit: type=1400 audit(1790350665.997:396): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.992217][ T1329] netlink: 136 bytes leftover after parsing attributes in process `syz.2.304'. [ 56.029174][ T1338] loop3: detected capacity change from 0 to 512 [ 56.035552][ T1329] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 56.062117][ T1338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.308: bg 0: block 385: padding at end of block bitmap is not set [ 56.076483][ T1338] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 56.085512][ T1338] EXT4-fs (loop3): 2 truncates cleaned up [ 56.094944][ T1338] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.142477][ T287] EXT4-fs (loop3): unmounting filesystem. [ 56.192727][ T28] audit: type=1400 audit(1790350666.297:397): avc: denied { read } for pid=1346 comm="syz.2.311" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 56.214202][ T323] usb 1-1: device descriptor read/64, error -71 [ 56.220453][ T19] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 56.266156][ T28] audit: type=1400 audit(1790350666.327:398): avc: denied { open } for pid=1346 comm="syz.2.311" path="/61/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 56.319030][ T1358] __vm_enough_memory: pid: 1358, comm: syz.2.316, no enough memory for the allocation [ 56.412664][ T19] usb 7-1: config 127 has an invalid interface number: 57 but max is 0 [ 56.427532][ T19] usb 7-1: config 127 has no interface number 0 [ 56.439307][ T19] usb 7-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 56.469237][ T19] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 56.481735][ T323] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 56.491704][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.507180][ T19] usb 7-1: Product: syz [ 56.514568][ T19] usb 7-1: Manufacturer: syz [ 56.519140][ T19] usb 7-1: SerialNumber: syz [ 56.533862][ T1330] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 56.549904][ T1386] overlayfs: failed to clone upperpath [ 56.611723][ T297] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 56.652804][ T323] usb 1-1: device descriptor read/64, error -71 [ 56.672695][ T1403] overlayfs: failed to clone upperpath [ 56.678654][ T1404] __vm_enough_memory: pid: 1404, comm: syz.2.332, no enough memory for the allocation [ 56.802668][ T297] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.910989][ T297] usb 4-1: config 0 interface 0 has no altsetting 0 [ 57.152418][ T1415] loop2: detected capacity change from 0 to 131072 [ 57.160049][ T1417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 57.167739][ T323] usb 1-1: device descriptor read/64, error -71 [ 57.177153][ T1415] F2FS-fs (loop2): invalid crc value [ 57.198172][ T1415] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.224357][ T1415] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 57.235842][ T297] usb 4-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 57.286045][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.311995][ T323] usb usb1-port1: attempt power cycle [ 57.335515][ T297] usb 4-1: config 0 descriptor?? [ 57.423336][ T19] asix 7-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 57.633568][ T19] asix 7-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 33 [ 57.657193][ T1433] syz.2.343 invoked oom-killer: gfp_mask=0x100dc2(GFP_HIGHUSER|__GFP_ZERO), order=0, oom_score_adj=1000 [ 57.668482][ T1433] CPU: 0 PID: 1433 Comm: syz.2.343 Not tainted syzkaller #0 [ 57.675751][ T1433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 57.685780][ T1433] Call Trace: [ 57.689040][ T1433] [ 57.691948][ T1433] __dump_stack+0x21/0x24 [ 57.696261][ T1433] dump_stack_lvl+0x110/0x170 [ 57.700916][ T1433] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.705918][ T1433] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 57.711706][ T1433] ? ___ratelimit+0x40a/0x590 [ 57.716362][ T1433] dump_stack+0x15/0x24 [ 57.720496][ T1433] dump_header+0xdb/0x660 [ 57.724807][ T1433] ? __cfi_gfp_zone+0x10/0x10 [ 57.729473][ T1433] oom_kill_process+0x32a/0x410 [ 57.734305][ T1433] ? kvm_sched_clock_read+0x18/0x40 [ 57.739487][ T1433] out_of_memory+0x630/0x930 [ 57.744056][ T1433] ? __cfi_out_of_memory+0x10/0x10 [ 57.749148][ T1433] mem_cgroup_out_of_memory+0x2be/0x390 [ 57.754673][ T1433] ? __kasan_check_write+0x14/0x20 [ 57.759762][ T1433] ? mem_cgroup_oom_trylock+0x360/0x360 [ 57.765291][ T1433] try_charge_memcg+0xb8a/0x1650 [ 57.770203][ T1433] ? __kasan_check_write+0x14/0x20 [ 57.775288][ T1433] ? __set_page_owner+0x50/0x60 [ 57.780113][ T1433] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 57.785465][ T1433] ? prep_new_page+0x1c/0x110 [ 57.790117][ T1433] ? get_page_from_freelist+0x2ca9/0x2d20 [ 57.795813][ T1433] ? __cfi_workingset_update_node+0x10/0x10 [ 57.801686][ T1433] charge_memcg+0x81/0x1f0 [ 57.806096][ T1433] __mem_cgroup_charge+0x93/0x290 [ 57.811095][ T1433] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.816703][ T1433] __filemap_add_folio+0x169/0xc20 [ 57.821792][ T1433] ? __cfi___filemap_add_folio+0x10/0x10 [ 57.827394][ T1433] ? folio_add_lru+0x2d6/0x650 [ 57.832134][ T1433] ? __cfi_workingset_update_node+0x10/0x10 [ 57.838000][ T1433] ? xas_start+0x31d/0x3e0 [ 57.842407][ T1433] filemap_add_folio+0x5e/0x260 [ 57.847230][ T1433] __filemap_get_folio+0x77f/0xa70 [ 57.852317][ T1433] ? __cfi___filemap_get_folio+0x10/0x10 [ 57.857928][ T1433] ? kasan_save_alloc_info+0x1f/0x30 [ 57.863189][ T1433] pagecache_get_page+0x2b/0x110 [ 57.868105][ T1433] aio_setup_ring+0x3a7/0xbc0 [ 57.872777][ T1433] ? free_ioctx_reqs+0x160/0x160 [ 57.877710][ T1433] ioctx_alloc+0x31d/0x720 [ 57.882100][ T1433] __se_sys_io_setup+0x6f/0x230 [ 57.886925][ T1433] __x64_sys_io_setup+0x5b/0x70 [ 57.891761][ T1433] x64_sys_call+0x840/0x9a0 [ 57.896252][ T1433] do_syscall_64+0x4c/0xa0 [ 57.900666][ T1433] ? clear_bhb_loop+0x30/0x80 [ 57.905318][ T1433] ? clear_bhb_loop+0x30/0x80 [ 57.909980][ T1433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.915864][ T1433] RIP: 0033:0x7f522a19e159 [ 57.920262][ T1433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.939853][ T1433] RSP: 002b:00007f522b055028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 57.948244][ T1433] RAX: ffffffffffffffda RBX: 00007f522a425fa0 RCX: 00007f522a19e159 [ 57.956190][ T1433] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 00000000000020fe [ 57.964136][ T1433] RBP: 00007f522a23506b R08: 0000000000000000 R09: 0000000000000000 [ 57.972089][ T1433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.980050][ T1433] R13: 00007f522a426038 R14: 00007f522a425fa0 R15: 00007ffe9726bbe8 [ 57.988008][ T1433] [ 57.993367][ T323] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 58.003108][ T297] wacom 0003:056A:030A.0004: unknown main item tag 0x7 [ 58.013283][ T1433] memory: usage 8kB, limit 8kB, failcnt 40 [ 58.019903][ T297] wacom 0003:056A:030A.0004: hidraw0: USB HID v0.0c Device [HID 056a:030a] on usb-dummy_hcd.3-1/input0 [ 58.031164][ T1433] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 58.042829][ T323] usb 1-1: device descriptor read/8, error -71 [ 58.057587][ T1433] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 58.070327][ T1433] Memory cgroup stats for /syz2/test: [ 58.070415][ T1433] anon 0 [ 58.070415][ T1433] file 8192 [ 58.070415][ T1433] kernel 0 [ 58.070415][ T1433] kernel_stack 0 [ 58.070415][ T1433] pagetables 0 [ 58.070415][ T1433] sec_pagetables 0 [ 58.070415][ T1433] percpu 0 [ 58.070415][ T1433] sock 0 [ 58.070415][ T1433] vmalloc 0 [ 58.070415][ T1433] shmem 0 [ 58.070415][ T1433] file_mapped 0 [ 58.070415][ T1433] file_dirty 0 [ 58.070415][ T1433] file_writeback 0 [ 58.070415][ T1433] swapcached 0 [ 58.070415][ T1433] anon_thp 0 [ 58.070415][ T1433] file_thp 0 [ 58.070415][ T1433] shmem_thp 0 [ 58.070415][ T1433] inactive_anon 0 [ 58.070415][ T1433] active_anon 0 [ 58.070415][ T1433] inactive_file 0 [ 58.070415][ T1433] active_file 8192 [ 58.070415][ T1433] unevictable 0 [ 58.070415][ T1433] slab_reclaimable 0 [ 58.070415][ T1433] slab_unreclaimable 0 [ 58.070415][ T1433] slab 0 [ 58.070415][ T1433] workingset_refault_anon 0 [ 58.070415][ T1433] workingset_refault_file 0 [ 58.165205][ T1433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.343,pid=1432,uid=0 [ 58.181346][ T1433] Memory cgroup out of memory: Killed process 1432 (syz.2.343) total-vm:94176kB, anon-rss:1404kB, file-rss:21768kB, shmem-rss:11348kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 58.204229][ T323] usb 1-1: device descriptor read/8, error -71 [ 58.214414][ T1356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.228001][ T1356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.331177][ T1446] __vm_enough_memory: pid: 1446, comm: syz.0.345, no enough memory for the allocation [ 58.354864][ T1450] loop0: detected capacity change from 0 to 256 [ 58.364019][ T1448] netlink: 64 bytes leftover after parsing attributes in process `syz.0.346'. [ 58.415368][ T1458] overlayfs: failed to clone upperpath [ 58.437266][ T1460] loop0: detected capacity change from 0 to 1024 [ 58.462291][ T1460] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #3: block 1: comm syz.0.348: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.494302][ T1460] EXT4-fs (loop0): Remounting filesystem read-only [ 58.508381][ T1460] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.348: Failed to acquire dquot type 0 [ 58.521611][ T1460] EXT4-fs (loop0): Remounting filesystem read-only [ 58.528364][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 58.535960][ T1460] EXT4-fs error (device loop0): ext4_free_blocks:6220: comm syz.0.348: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.550240][ T1460] EXT4-fs (loop0): Remounting filesystem read-only [ 58.556974][ T1460] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.348: Invalid inode bitmap blk 0 in block_group 0 [ 58.569684][ T1460] EXT4-fs (loop0): Remounting filesystem read-only [ 58.576367][ T324] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.591078][ T1460] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 58.600328][ T1460] EXT4-fs (loop0): Remounting filesystem read-only [ 58.607011][ T324] EXT4-fs (loop0): Remounting filesystem read-only [ 58.614250][ T1460] EXT4-fs (loop0): 1 orphan inode deleted [ 58.620031][ T324] EXT4-fs error (device loop0): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 0 [ 58.631581][ T1460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.640638][ T324] EXT4-fs (loop0): Remounting filesystem read-only [ 58.664984][ T288] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /62/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 58.686143][ T288] EXT4-fs (loop0): Remounting filesystem read-only [ 58.692812][ T288] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 58.704534][ T288] EXT4-fs (loop0): Remounting filesystem read-only [ 58.711142][ T288] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 58.723611][ T288] EXT4-fs (loop0): Remounting filesystem read-only [ 58.731766][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 58.742288][ T19] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 58.754792][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.765379][ T1472] EXT4-fs (loop0): unmounting filesystem. [ 58.771123][ T19] usb 3-1: Product: syz [ 58.784075][ T19] usb 3-1: Manufacturer: syz [ 58.797989][ T19] usb 3-1: SerialNumber: syz [ 58.898764][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.905884][ T1474] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.913827][ T1474] device bridge_slave_0 entered promiscuous mode [ 58.922791][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.929860][ T1474] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.937362][ T1474] device bridge_slave_1 entered promiscuous mode [ 58.978170][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.985241][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.992483][ T1474] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.999489][ T1474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.019535][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.028002][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.035521][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.050070][ T297] usb 7-1: USB disconnect, device number 7 [ 59.069552][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.088310][ T1481] __vm_enough_memory: pid: 1481, comm: syz.6.356, no enough memory for the allocation [ 59.104276][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.111306][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.145651][ T1483] loop6: detected capacity change from 0 to 256 [ 59.155273][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.191800][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.198840][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.249916][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.266681][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.329727][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.338113][ T297] usb 4-1: USB disconnect, device number 6 [ 59.369882][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.654913][ T1474] device veth0_vlan entered promiscuous mode [ 59.661432][ T447] device bridge_slave_1 left promiscuous mode [ 59.667802][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.675247][ T447] device bridge_slave_0 left promiscuous mode [ 59.681331][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.689501][ T447] device veth1_macvtap left promiscuous mode [ 59.695530][ T447] device veth0_vlan left promiscuous mode [ 59.763783][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.787962][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.808075][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.815536][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.827107][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.851540][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.862640][ T19] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 59.872677][ T1518] loop6: detected capacity change from 0 to 4096 [ 59.883312][ T19] usb 3-1: USB disconnect, device number 5 [ 59.889999][ T1474] device veth1_macvtap entered promiscuous mode [ 59.901878][ T1518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.919311][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.928240][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.936328][ T1518] EXT4-fs (loop6): Test dummy encryption mode enabled [ 59.943764][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.952562][ T1518] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 59.976603][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.996902][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.018710][ T1522] loop7: detected capacity change from 0 to 128 [ 60.034522][ T1522] FAT-fs (loop7): bogus sectors per cluster 7 [ 60.040664][ T1522] FAT-fs (loop7): Can't find a valid FAT filesystem [ 60.051179][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 60.051188][ T28] audit: type=1400 audit(1790350670.147:409): avc: denied { read } for pid=1517 comm="syz.6.362" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.100176][ T28] audit: type=1400 audit(1790350670.147:410): avc: denied { open } for pid=1517 comm="syz.6.362" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.150373][ T28] audit: type=1400 audit(1790350670.147:411): avc: denied { ioctl } for pid=1517 comm="syz.6.362" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.176520][ T297] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 60.185802][ T1526] netlink: 'syz.1.363': attribute type 17 has an invalid length. [ 60.194904][ T1526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.326051][ T28] audit: type=1400 audit(1790350670.427:412): avc: denied { ioctl } for pid=1527 comm="syz.1.364" path="socket:[22879]" dev="sockfs" ino=22879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.350858][ T1531] mmap: syz.1.364 (1531): VmData 41091072 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 60.363577][ T19] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.372763][ T297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.399860][ T297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.453657][ T297] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.463341][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.475281][ T297] usb 4-1: SerialNumber: syz [ 60.867023][ T1534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 60.887989][ T297] usb 4-1: 0:2 : does not exist [ 60.893955][ T456] EXT4-fs (loop6): unmounting filesystem. [ 60.908961][ T297] usb 4-1: USB disconnect, device number 7 [ 60.915358][ T19] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 60.953634][ T19] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 60.964827][ T1540] __vm_enough_memory: pid: 1540, comm: syz.6.367, no enough memory for the allocation [ 60.984561][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 61.012827][ T19] usb 8-1: Product: syz [ 61.020033][ T1546] overlayfs: failed to clone upperpath [ 61.025742][ T19] usb 8-1: Manufacturer: syz [ 61.030650][ T19] usb 8-1: SerialNumber: syz [ 61.037495][ T19] usb 8-1: config 0 descriptor?? [ 61.255275][ T297] usb 8-1: USB disconnect, device number 2 [ 61.281736][ T19] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 61.484001][ T1564] /dev/loop0: Can't open blockdev [ 61.693445][ T19] usb 7-1: Using ep0 maxpacket: 8 [ 61.704860][ T19] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.724741][ T19] usb 7-1: New USB device found, idVendor=0421, idProduct=033e, bcdDevice=5f.0e [ 61.748878][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.761815][ T19] usb 7-1: config 0 descriptor?? [ 61.768062][ T19] usb 7-1: bad CDC descriptors [ 61.943392][ T1584] device syzkaller0 entered promiscuous mode [ 61.949850][ T1584] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 61.958547][ T28] audit: type=1400 audit(1790350672.057:413): avc: denied { create } for pid=1583 comm="syz.7.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.033060][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 62.430130][ T1587] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 62.441713][ T1587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.450637][ T28] audit: type=1400 audit(1790350672.527:414): avc: denied { write } for pid=1585 comm="syz.7.386" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.498068][ T28] audit: type=1400 audit(1790350672.597:415): avc: denied { read } for pid=1589 comm="syz.1.387" path="socket:[23061]" dev="sockfs" ino=23061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.557769][ T28] audit: type=1400 audit(1790350672.657:416): avc: denied { getopt } for pid=1597 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.577188][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 62.584110][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 62.592576][ T19] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.601547][ T19] usb 4-1: config 1 has no interface number 0 [ 62.607783][ T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 62.618948][ T19] usb 4-1: config 1 interface 2 has no altsetting 0 [ 62.626888][ T19] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 62.636047][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.644097][ T19] usb 4-1: Product: syz [ 62.650618][ T19] usb 4-1: Manufacturer: syz [ 62.655333][ T19] usb 4-1: SerialNumber: syz [ 62.780086][ T308] usb 7-1: USB disconnect, device number 8 [ 62.811979][ T297] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 62.848019][ T28] audit: type=1400 audit(1790350672.947:417): avc: denied { mount } for pid=1605 comm="syz.6.394" name="/" dev="ramfs" ino=23118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.872573][ T1578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.881549][ T1607] Bluetooth: ISO socket layer initialized [ 62.891560][ T1578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.917295][ T19] usb 4-1: USB disconnect, device number 8 [ 62.929671][ T28] audit: type=1400 audit(1790350672.987:418): avc: denied { getopt } for pid=1605 comm="syz.6.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.015808][ T297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.042032][ T297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.063291][ T297] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.081474][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 63.103404][ T297] usb 3-1: SerialNumber: syz [ 63.120267][ T1624] FAULT_INJECTION: forcing a failure. [ 63.120267][ T1624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.134144][ T1624] CPU: 0 PID: 1624 Comm: syz.7.399 Not tainted syzkaller #0 [ 63.141413][ T1624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.151455][ T1624] Call Trace: [ 63.154712][ T1624] [ 63.157905][ T1624] __dump_stack+0x21/0x24 [ 63.162236][ T1624] dump_stack_lvl+0x110/0x170 [ 63.166892][ T1624] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.171891][ T1624] ? ____sys_sendmsg+0x821/0x9c0 [ 63.176808][ T1624] dump_stack+0x15/0x24 [ 63.180940][ T1624] should_fail_ex+0x3bf/0x510 [ 63.185590][ T1624] should_fail+0xb/0x10 [ 63.189717][ T1624] should_fail_usercopy+0x1a/0x20 [ 63.194714][ T1624] _copy_from_user+0x1e/0xc0 [ 63.199285][ T1624] ___sys_sendmsg+0x1c3/0x360 [ 63.203938][ T1624] ? __sys_sendmsg+0x290/0x290 [ 63.208678][ T1624] ? up_read+0x56/0x1d0 [ 63.212819][ T1624] __sys_sendmmsg+0x2cc/0x4e0 [ 63.217475][ T1624] ? __cfi___sys_sendmmsg+0x10/0x10 [ 63.222656][ T1624] ? fpregs_restore_userregs+0x128/0x260 [ 63.228261][ T1624] __x64_sys_sendmmsg+0xa0/0xb0 [ 63.233090][ T1624] x64_sys_call+0x3f5/0x9a0 [ 63.237570][ T1624] do_syscall_64+0x4c/0xa0 [ 63.241967][ T1624] ? clear_bhb_loop+0x30/0x80 [ 63.246618][ T1624] ? clear_bhb_loop+0x30/0x80 [ 63.251270][ T1624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.257143][ T1624] RIP: 0033:0x7ff22e39e159 [ 63.261531][ T1624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.281115][ T1624] RSP: 002b:00007ff22f1e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 63.289507][ T1624] RAX: ffffffffffffffda RBX: 00007ff22e625fa0 RCX: 00007ff22e39e159 [ 63.297452][ T1624] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 63.305399][ T1624] RBP: 00007ff22e43506b R08: 0000000000000000 R09: 0000000000000000 [ 63.313348][ T1624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.321297][ T1624] R13: 00007ff22e626038 R14: 00007ff22e625fa0 R15: 00007fff16b01b58 [ 63.329252][ T1624] [ 63.338904][ T297] usb 3-1: 0:2 : does not exist [ 63.354097][ T297] usb 3-1: USB disconnect, device number 6 [ 63.553467][ T1629] loop3: detected capacity change from 0 to 16 [ 63.571656][ T1629] erofs: (device loop3): mounted with root inode @ nid 36. [ 63.591179][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.756449][ T1637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.402'. [ 65.306501][ T1650] loop7: detected capacity change from 0 to 256 [ 65.370059][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 65.370069][ T28] audit: type=1400 audit(1790350675.467:422): avc: denied { nlmsg_read } for pid=1656 comm="syz.7.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 65.481734][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.501023][ T28] audit: type=1400 audit(1790350675.527:423): avc: denied { create } for pid=1656 comm="syz.7.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 65.572933][ T1670] netlink: 'syz.7.414': attribute type 12 has an invalid length. [ 65.584492][ T1670] netlink: 'syz.7.414': attribute type 29 has an invalid length. [ 65.596592][ T1670] netlink: 148 bytes leftover after parsing attributes in process `syz.7.414'. [ 65.615387][ T1670] netlink: 'syz.7.414': attribute type 1 has an invalid length. [ 65.633198][ T1670] netlink: 'syz.7.414': attribute type 2 has an invalid length. [ 65.641788][ T476] Bluetooth: hci0: command 0x1003 tx timeout [ 65.647785][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.653875][ T19] usb 3-1: device descriptor read/64, error -71 [ 65.661357][ T1629] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 65.678237][ T28] audit: type=1400 audit(1790350675.777:424): avc: denied { mounton } for pid=1669 comm="syz.7.414" path="/13/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 65.747498][ T1682] input: syz0 as /devices/virtual/input/input10 [ 65.776997][ T1684] loop6: detected capacity change from 0 to 512 [ 65.815828][ T1684] ext2: Unknown parameter 'smackfshat' [ 65.828038][ T28] audit: type=1400 audit(1790350675.817:425): avc: denied { mounton } for pid=1669 comm="syz.7.414" path="/13/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 65.921761][ T19] usb 3-1: device descriptor read/64, error -71 [ 65.934151][ T1693] overlayfs: failed to clone upperpath [ 65.951381][ T28] audit: type=1400 audit(1790350675.847:426): avc: denied { write } for pid=1680 comm="syz.3.416" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.050214][ T28] audit: type=1400 audit(1790350675.957:427): avc: denied { write } for pid=1680 comm="syz.3.416" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.142709][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.173609][ T28] audit: type=1400 audit(1790350675.957:428): avc: denied { ioctl } for pid=1680 comm="syz.3.416" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.209402][ T1717] loop7: detected capacity change from 0 to 128 [ 66.221780][ T19] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 66.291851][ T1717] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 66.301627][ T28] audit: type=1326 audit(1790350676.267:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.1.425" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5f59e159 code=0x7ffc0000 [ 66.391205][ T28] audit: type=1326 audit(1790350676.267:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.1.425" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5f59e159 code=0x7ffc0000 [ 66.415922][ T19] usb 3-1: device descriptor read/64, error -71 [ 66.430302][ T1717] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 66.493819][ T28] audit: type=1326 audit(1790350676.267:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.1.425" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5f59e159 code=0x7ffc0000 [ 66.524619][ T1717] ext2 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.672770][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 66.701737][ T19] usb 3-1: device descriptor read/64, error -71 [ 66.814852][ T1730] sch_tbf: burst 32855 is lower than device lo mtu (65509) ! [ 66.831762][ T19] usb usb3-port1: attempt power cycle [ 66.909036][ T1722] loop3: detected capacity change from 0 to 40427 [ 66.937813][ T1722] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 66.972615][ T1722] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 66.995456][ T1722] F2FS-fs (loop3): invalid crc value [ 67.020317][ T1722] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.083414][ T1722] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.107485][ T1722] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.251722][ T19] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 67.303068][ T19] usb 3-1: device descriptor read/8, error -71 [ 67.370421][ T1736] overlayfs: failed to clone upperpath [ 67.423509][ T1738] syz.1.433 (1738): attempted to duplicate a private mapping with mremap. This is not supported. [ 67.452702][ T19] usb 3-1: device descriptor read/8, error -71 [ 67.468550][ T1742] random: crng reseeded on system resumption [ 67.721701][ C0] ================================================================== [ 67.729778][ C0] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0 [ 67.736784][ C0] Write of size 8 at addr ffff888131790a00 by task syz.6.434/1742 [ 67.744560][ C0] [ 67.746861][ C0] CPU: 0 PID: 1742 Comm: syz.6.434 Not tainted syzkaller #0 [ 67.754115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.764144][ C0] Call Trace: [ 67.767401][ C0] [ 67.770222][ C0] __dump_stack+0x21/0x24 [ 67.774550][ C0] dump_stack_lvl+0x110/0x170 [ 67.779200][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.784199][ C0] ? __cfi_trigger_load_balance+0x10/0x10 [ 67.789894][ C0] ? __run_timers+0x341/0x9b0 [ 67.794558][ C0] print_address_description+0x71/0x200 [ 67.800080][ C0] print_report+0x4a/0x60 [ 67.804383][ C0] kasan_report+0x122/0x150 [ 67.808863][ C0] ? __run_timers+0x341/0x9b0 [ 67.813517][ C0] __asan_report_store8_noabort+0x17/0x20 [ 67.819213][ C0] __run_timers+0x341/0x9b0 [ 67.823690][ C0] ? sched_clock_cpu+0x6e/0x260 [ 67.828513][ C0] ? calc_index+0x200/0x200 [ 67.832992][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 67.838185][ C0] run_timer_softirq+0x6a/0xf0 [ 67.842924][ C0] handle_softirqs+0x1d7/0x600 [ 67.847661][ C0] __irq_exit_rcu+0x52/0xf0 [ 67.852139][ C0] irq_exit_rcu+0x9/0x10 [ 67.856355][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 67.861962][ C0] [ 67.864883][ C0] [ 67.867788][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 67.873745][ C0] RIP: 0010:generic_exec_single+0x2bc/0x3b0 [ 67.879613][ C0] Code: 74 71 e8 77 7a 09 00 43 0f b6 04 3e 84 c0 0f 85 c7 00 00 00 41 c7 04 24 00 00 00 00 bb fa ff ff ff eb 11 e8 56 7a 09 00 31 db <49> bf 00 00 00 00 00 fc ff df 48 c7 44 24 20 0e 36 e0 45 4b c7 44 [ 67.899194][ C0] RSP: 0018:ffffc9000070f9c0 EFLAGS: 00000283 [ 67.905243][ C0] RAX: ffffffff8167f0fe RBX: 0000000000000000 RCX: 0000000000080000 [ 67.913192][ C0] RDX: ffffc90000e99000 RSI: 0000000000027dc1 RDI: 0000000000027dc2 [ 67.921143][ C0] RBP: ffffc9000070fa70 R08: 0000000000000003 R09: 0000000000000004 [ 67.929089][ C0] R10: dffffc0000000000 R11: fffff520000e1f14 R12: ffffc9000070fb08 [ 67.937033][ C0] R13: 1ffff920000e1f3c R14: ffffc9000070fb40 R15: 0000000000000200 [ 67.944981][ C0] ? generic_exec_single+0x24e/0x3b0 [ 67.950248][ C0] ? __cfi___rdmsr_safe_on_cpu+0x10/0x10 [ 67.955854][ C0] ? smp_call_function_single+0x490/0x490 [ 67.961551][ C0] ? do_user_addr_fault+0x9a5/0x1030 [ 67.966841][ C0] smp_call_function_single_async+0x81/0x110 [ 67.972797][ C0] rdmsr_safe_on_cpu+0x12e/0x260 [ 67.977717][ C0] ? __cfi_rdmsr_safe_on_cpu+0x10/0x10 [ 67.983153][ C0] ? __cfi___rdmsr_safe_on_cpu+0x10/0x10 [ 67.988762][ C0] ? __kasan_check_read+0x11/0x20 [ 67.993766][ C0] msr_read+0x108/0x1b0 [ 67.997905][ C0] ? __cfi_msr_read+0x10/0x10 [ 68.002558][ C0] ? security_file_permission+0x94/0xb0 [ 68.008080][ C0] ? __cfi_msr_read+0x10/0x10 [ 68.012750][ C0] vfs_read+0x286/0x930 [ 68.016882][ C0] ? __cfi_vfs_read+0x10/0x10 [ 68.021554][ C0] ? __fget_files+0x2d1/0x330 [ 68.026206][ C0] ? __fdget_pos+0x1f2/0x380 [ 68.030771][ C0] ? ksys_read+0x70/0x260 [ 68.035078][ C0] ksys_read+0x14a/0x260 [ 68.039314][ C0] ? __cfi_ksys_read+0x10/0x10 [ 68.044053][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 68.049672][ C0] __x64_sys_read+0x7b/0x90 [ 68.054146][ C0] x64_sys_call+0x2f/0x9a0 [ 68.058536][ C0] do_syscall_64+0x4c/0xa0 [ 68.062929][ C0] ? clear_bhb_loop+0x30/0x80 [ 68.067581][ C0] ? clear_bhb_loop+0x30/0x80 [ 68.072231][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.078094][ C0] RIP: 0033:0x7fdff499e159 [ 68.082481][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.102058][ C0] RSP: 002b:00007fdff5873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.110443][ C0] RAX: ffffffffffffffda RBX: 00007fdff4c25fa0 RCX: 00007fdff499e159 [ 68.118394][ C0] RDX: 0000000000019000 RSI: 0000200000032680 RDI: 0000000000000007 [ 68.126348][ C0] RBP: 00007fdff4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 68.134291][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.142237][ C0] R13: 00007fdff4c26038 R14: 00007fdff4c25fa0 R15: 00007ffc9f23d878 [ 68.150189][ C0] [ 68.153186][ C0] [ 68.155491][ C0] Allocated by task 1629: [ 68.159789][ C0] kasan_set_track+0x4b/0x70 [ 68.164363][ C0] kasan_save_alloc_info+0x1f/0x30 [ 68.169447][ C0] __kasan_kmalloc+0x95/0xb0 [ 68.174010][ C0] __kmalloc+0xb4/0x1e0 [ 68.178138][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 68.183151][ C0] hci_uart_tty_ioctl+0x3c4/0xa70 [ 68.188148][ C0] tty_ioctl+0x8ef/0xc60 [ 68.192365][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 68.197014][ C0] __x64_sys_ioctl+0x7b/0x90 [ 68.201574][ C0] x64_sys_call+0x58b/0x9a0 [ 68.206065][ C0] do_syscall_64+0x4c/0xa0 [ 68.210458][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.216324][ C0] [ 68.218622][ C0] Freed by task 1629: [ 68.222571][ C0] kasan_set_track+0x4b/0x70 [ 68.227139][ C0] kasan_save_free_info+0x2b/0x40 [ 68.232139][ C0] ____kasan_slab_free+0x132/0x180 [ 68.237225][ C0] __kasan_slab_free+0x11/0x20 [ 68.241960][ C0] slab_free_freelist_hook+0xc2/0x190 [ 68.247301][ C0] __kmem_cache_free+0xb7/0x1b0 [ 68.252124][ C0] kfree+0x6f/0xf0 [ 68.255814][ C0] hci_release_dev+0x12a3/0x13b0 [ 68.260729][ C0] bt_host_release+0x82/0x90 [ 68.265288][ C0] device_release+0xa4/0x1d0 [ 68.269853][ C0] kobject_put+0x19d/0x280 [ 68.274246][ C0] put_device+0x1f/0x30 [ 68.278387][ C0] hci_dev_cmd+0x279/0x740 [ 68.282775][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 68.287423][ C0] sock_do_ioctl+0x114/0x330 [ 68.291982][ C0] sock_ioctl+0x475/0x700 [ 68.296296][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 68.300947][ C0] __x64_sys_ioctl+0x7b/0x90 [ 68.305506][ C0] x64_sys_call+0x58b/0x9a0 [ 68.309984][ C0] do_syscall_64+0x4c/0xa0 [ 68.314373][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.320236][ C0] [ 68.322535][ C0] Last potentially related work creation: [ 68.328223][ C0] kasan_save_stack+0x3a/0x60 [ 68.332876][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 68.338214][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 68.343990][ C0] insert_work+0x51/0x300 [ 68.348288][ C0] __queue_work+0x9d0/0xd50 [ 68.352767][ C0] queue_work_on+0xde/0x150 [ 68.357258][ C0] __hci_cmd_sync_sk+0xaa8/0xd80 [ 68.362186][ C0] hci_cmd_sync_status+0x53/0x120 [ 68.367184][ C0] hci_dev_cmd+0x642/0x740 [ 68.371587][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 68.376233][ C0] sock_do_ioctl+0x114/0x330 [ 68.380806][ C0] sock_ioctl+0x475/0x700 [ 68.385114][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 68.389766][ C0] __x64_sys_ioctl+0x7b/0x90 [ 68.394325][ C0] x64_sys_call+0x58b/0x9a0 [ 68.398805][ C0] do_syscall_64+0x4c/0xa0 [ 68.403197][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.409075][ C0] [ 68.411374][ C0] Second to last potentially related work creation: [ 68.417946][ C0] kasan_save_stack+0x3a/0x60 [ 68.422612][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 68.427954][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 68.433743][ C0] insert_work+0x51/0x300 [ 68.438043][ C0] __queue_work+0x9d0/0xd50 [ 68.442519][ C0] queue_work_on+0xde/0x150 [ 68.447007][ C0] hci_cmd_timeout+0x191/0x200 [ 68.451743][ C0] process_one_work+0x717/0xc30 [ 68.456566][ C0] worker_thread+0xa4d/0x11d0 [ 68.461211][ C0] kthread+0x281/0x320 [ 68.465251][ C0] ret_from_fork+0x1f/0x30 [ 68.469653][ C0] [ 68.471949][ C0] The buggy address belongs to the object at ffff888131790000 [ 68.471949][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 68.485984][ C0] The buggy address is located 2560 bytes inside of [ 68.485984][ C0] 8192-byte region [ffff888131790000, ffff888131792000) [ 68.499402][ C0] [ 68.501700][ C0] The buggy address belongs to the physical page: [ 68.508081][ C0] page:ffffea0004c5e400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131790 [ 68.518301][ C0] head:ffffea0004c5e400 order:3 compound_mapcount:0 compound_pincount:0 [ 68.526609][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 68.532656][ C0] raw: 4000000000010200 ffffea00044ca200 dead000000000003 ffff888100043500 [ 68.541209][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 68.549758][ C0] page dumped because: kasan: bad access detected [ 68.556154][ C0] page_owner tracks the page as allocated [ 68.561851][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, tgid 286 (syz-executor), ts 23449579445, free_ts 0 [ 68.582132][ C0] post_alloc_hook+0x1f5/0x210 [ 68.586873][ C0] prep_new_page+0x1c/0x110 [ 68.591353][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 68.596883][ C0] __alloc_pages+0x1fa/0x610 [ 68.601444][ C0] alloc_slab_page+0x6e/0xf0 [ 68.606004][ C0] new_slab+0x98/0x3e0 [ 68.610046][ C0] ___slab_alloc+0x70f/0xb70 [ 68.614609][ C0] __slab_alloc+0x5e/0xa0 [ 68.618913][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 68.624357][ C0] __kmalloc_node+0xa2/0x1e0 [ 68.628916][ C0] kvmalloc_node+0x28a/0x460 [ 68.633475][ C0] wg_packet_queue_init+0x95/0x320 [ 68.638561][ C0] wg_newlink+0x454/0x790 [ 68.642864][ C0] rtnl_newlink+0x14dc/0x20d0 [ 68.647518][ C0] rtnetlink_rcv_msg+0xb28/0xde0 [ 68.652426][ C0] netlink_rcv_skb+0x200/0x450 [ 68.657160][ C0] page_owner free stack trace missing [ 68.662501][ C0] [ 68.664800][ C0] Memory state around the buggy address: [ 68.670400][ C0] ffff888131790900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.678430][ C0] ffff888131790980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.686480][ C0] >ffff888131790a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.694509][ C0] ^ [ 68.698550][ C0] ffff888131790a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.706579][ C0] ffff888131790b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 68.714608][ C0] ================================================================== [ 68.722636][ C0] Disabling lock debugging due to kernel taint [ 68.728805][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 68.740495][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 68.748890][ C0] CPU: 0 PID: 1742 Comm: syz.6.434 Tainted: G B syzkaller #0 [ 68.757626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 68.767658][ C0] RIP: 0010:__queue_work+0x582/0xd50 [ 68.772927][ C0] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 fd 69 b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 70 dd 6e 00 49 8b 3e e8 98 65 b9 03 [ 68.792510][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 68.798558][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117ea3cc0 [ 68.806506][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 68.814448][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb [ 68.822397][ C0] R10: dffffc0000000000 R11: ffffed10262f2139 R12: ffff8881317909c8 [ 68.830342][ C0] R13: ffff888132c87800 R14: 0000000000000000 R15: 000000007fffffff [ 68.838285][ C0] FS: 00007fdff58736c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.847185][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.853742][ C0] CR2: 000020000004a000 CR3: 000000013b266000 CR4: 00000000003506b0 [ 68.861692][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.869639][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.877585][ C0] Call Trace: [ 68.880838][ C0] [ 68.883662][ C0] delayed_work_timer_fn+0x61/0x80 [ 68.888756][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 68.894540][ C0] call_timer_fn+0x46/0x2a0 [ 68.899019][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 68.904799][ C0] __run_timers+0x672/0x9b0 [ 68.909278][ C0] ? calc_index+0x200/0x200 [ 68.913828][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 68.919015][ C0] run_timer_softirq+0x6a/0xf0 [ 68.923763][ C0] handle_softirqs+0x1d7/0x600 [ 68.928510][ C0] __irq_exit_rcu+0x52/0xf0 [ 68.932987][ C0] irq_exit_rcu+0x9/0x10 [ 68.937202][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 68.942829][ C0] [ 68.945738][ C0] [ 68.948643][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 68.954600][ C0] RIP: 0010:generic_exec_single+0x2bc/0x3b0 [ 68.960471][ C0] Code: 74 71 e8 77 7a 09 00 43 0f b6 04 3e 84 c0 0f 85 c7 00 00 00 41 c7 04 24 00 00 00 00 bb fa ff ff ff eb 11 e8 56 7a 09 00 31 db <49> bf 00 00 00 00 00 fc ff df 48 c7 44 24 20 0e 36 e0 45 4b c7 44 [ 68.980057][ C0] RSP: 0018:ffffc9000070f9c0 EFLAGS: 00000283 [ 68.986109][ C0] RAX: ffffffff8167f0fe RBX: 0000000000000000 RCX: 0000000000080000 [ 68.994057][ C0] RDX: ffffc90000e99000 RSI: 0000000000027dc1 RDI: 0000000000027dc2 [ 69.002003][ C0] RBP: ffffc9000070fa70 R08: 0000000000000003 R09: 0000000000000004 [ 69.009950][ C0] R10: dffffc0000000000 R11: fffff520000e1f14 R12: ffffc9000070fb08 [ 69.017899][ C0] R13: 1ffff920000e1f3c R14: ffffc9000070fb40 R15: 0000000000000200 [ 69.025853][ C0] ? generic_exec_single+0x24e/0x3b0 [ 69.031139][ C0] ? __cfi___rdmsr_safe_on_cpu+0x10/0x10 [ 69.036749][ C0] ? smp_call_function_single+0x490/0x490 [ 69.042442][ C0] ? do_user_addr_fault+0x9a5/0x1030 [ 69.047703][ C0] smp_call_function_single_async+0x81/0x110 [ 69.053664][ C0] rdmsr_safe_on_cpu+0x12e/0x260 [ 69.058589][ C0] ? __cfi_rdmsr_safe_on_cpu+0x10/0x10 [ 69.064018][ C0] ? __cfi___rdmsr_safe_on_cpu+0x10/0x10 [ 69.069626][ C0] ? __kasan_check_read+0x11/0x20 [ 69.074625][ C0] msr_read+0x108/0x1b0 [ 69.078771][ C0] ? __cfi_msr_read+0x10/0x10 [ 69.083431][ C0] ? security_file_permission+0x94/0xb0 [ 69.088980][ C0] ? __cfi_msr_read+0x10/0x10 [ 69.093643][ C0] vfs_read+0x286/0x930 [ 69.097779][ C0] ? __cfi_vfs_read+0x10/0x10 [ 69.102429][ C0] ? __fget_files+0x2d1/0x330 [ 69.107087][ C0] ? __fdget_pos+0x1f2/0x380 [ 69.111657][ C0] ? ksys_read+0x70/0x260 [ 69.115978][ C0] ksys_read+0x14a/0x260 [ 69.120197][ C0] ? __cfi_ksys_read+0x10/0x10 [ 69.124939][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 69.130555][ C0] __x64_sys_read+0x7b/0x90 [ 69.135036][ C0] x64_sys_call+0x2f/0x9a0 [ 69.139432][ C0] do_syscall_64+0x4c/0xa0 [ 69.143826][ C0] ? clear_bhb_loop+0x30/0x80 [ 69.148479][ C0] ? clear_bhb_loop+0x30/0x80 [ 69.153127][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.158996][ C0] RIP: 0033:0x7fdff499e159 [ 69.163386][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.182963][ C0] RSP: 002b:00007fdff5873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.191369][ C0] RAX: ffffffffffffffda RBX: 00007fdff4c25fa0 RCX: 00007fdff499e159 [ 69.199314][ C0] RDX: 0000000000019000 RSI: 0000200000032680 RDI: 0000000000000007 [ 69.207276][ C0] RBP: 00007fdff4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 69.215235][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.223181][ C0] R13: 00007fdff4c26038 R14: 00007fdff4c25fa0 R15: 00007ffc9f23d878 [ 69.231136][ C0] [ 69.234150][ C0] Modules linked in: [ 69.238036][ C0] ---[ end trace 0000000000000000 ]--- [ 69.243470][ C0] RIP: 0010:__queue_work+0x582/0xd50 [ 69.248747][ C0] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 fd 69 b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 70 dd 6e 00 49 8b 3e e8 98 65 b9 03 [ 69.268346][ C0] RSP: 0018:ffffc90000007c78 EFLAGS: 00010046 [ 69.274393][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117ea3cc0 [ 69.282342][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 69.290294][ C0] RBP: ffffc90000007d08 R08: 0000000000000007 R09: 00000000fffffffb [ 69.298261][ C0] R10: dffffc0000000000 R11: ffffed10262f2139 R12: ffff8881317909c8 [ 69.306215][ C0] R13: ffff888132c87800 R14: 0000000000000000 R15: 000000007fffffff [ 69.314162][ C0] FS: 00007fdff58736c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 69.323068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.329634][ C0] CR2: 000020000004a000 CR3: 000000013b266000 CR4: 00000000003506b0 [ 69.337584][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.345528][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.353487][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 69.360712][ C0] Kernel Offset: disabled [ 69.365018][ C0] Rebooting in 86400 seconds..